MSP cybersecurity news digest, July 7, 2025

The report covers several active cybersecurity incidents and campaigns: Google patched an actively exploited Chrome V8 zero-day (CVE-2025-6554) now listed by CISA; Qantas disclosed a breach exposing ~6 million customer records from a third-party platform; Swiss nonprofit Radix was hit by Sarcoma ransomware with 1.3TB of data leaked; North Korean actors deployed a new NimDoor malware targeting Web3/crypto firms; and multiple phishing/callback (TOAD) campaigns are luring victims to attacker-controlled phone support numbers. The piece highlights attacker TTPs (social engineering, phishing, RDP abuse, process injection, persistence mechanisms), urges patching and defensive measures, and names several active groups involved in these operations.