MSP cybersecurity news digest, August 25, 2025

**Executive summary:** Microsoft issued August 2025 patches addressing 107 vulnerabilities including an actively concerning Windows Kerberos elevation-of-privilege zero-day; researchers disclosed RomCom exploiting a WinRAR zero-day (CVE-2025-8088) to drop multiple malware families, PEAR ransomware publicly leaked 1.26 TB of Alt Vision data after failed negotiations, and M&S is recovering from a DragonForce-linked ransomware incident that disrupted services and imposed substantial financial impact—meanwhile Acronis TRU reports rising phishing, collaboration-app exploits, and continued credential abuse targeting MSPs and telecoms.