MSP cybersecurity news digest, October 6, 2025

This briefing reports multiple high-risk events: a supplier-compromise leaking 430,000 Harrods customer records, active exploitation of a critical GoAnywhere MFT zero-day enabling remote code execution, a critical sudo vulnerability (CVE-2025-32463) with root privilege impact, a MatrixPDF toolkit used to weaponize PDFs for phishing and malware delivery, and an alleged Red Hat private-repository data exfiltration — collectively highlighting supply-chain risk, active exploitation, and credential/credential-harvesting threats.