MSP cybersecurity news digest, October 21, 2025

This report compiles multiple high‑impact incidents: Muji halted online sales after a ransomware attack on logistics partner Askul with confirmed data exfiltration; F5 disclosed a China‑linked UNC5221 breach that stole BIG‑IP source code and undisclosed vulnerabilities; Microsoft released October patches addressing 172 flaws including six actively exploited zero‑days; a marketing firm exposed a 13 TB database with roughly 40 billion unencrypted records; and Microsoft revoked 200 fraudulent certificates used to distribute Rhysida ransomware — collectively indicating active exploitation, supply‑chain and nation‑state threats, and large‑scale data leakage.