MSP cybersecurity news digest, July 14, 2025

**Executive Summary:** The report describes a July ransomware attack attributed to the SafePay operation that caused a global outage at Ingram Micro, details Microsoft Patch Tuesday fixes including a high-severity wormable RCE and other critical flaws, and documents multiple active malware and fraud campaigns — misuse of leaked Shellter to distribute infostealers (Lumma, SectopRAT), Oyster loader spread via SEO-poisoned downloads targeting thousands of SMBs, and a large network of 17,000+ baiting news sites used in investment scams across 50 countries — highlighting widespread active threats, observed TTPs, and remediation steps taken.