Cybersecurity Weekly Recap – PornHub Breach, Cisco 0-Day, Amazon Detains DPRK IT Worker, and more

This report is a comprehensive cybersecurity digest highlighting multiple active and high-impact threats: exploited zero-days (including Cisco AsyncOS CVE-2025-20393), large-scale server compromises (PCPcat impacting 59,000+ Next.js servers), rising ransomware and RaaS activity (Gentlemen, LockBit, Qilin), APT intrusions and insider infiltration (Lazarus-linked operative at Amazon, BlueDelta targeting Ukrainian users, Earth Alux IIS ShadowPad mesh), and significant data breaches (Jaguar Land Rover employee data, Pornhub analytics via Mixpanel). It also enumerates numerous critical vulnerabilities, exploitation techniques (DLL sideloading, ClickFix misuse, WebGPU UAF, unsafe deserialization), IoCs and mitigation recommendations for immediate defensive action.