MSP cybersecurity news digest, March 18, 2025

Microsoft's March 2025 Patch Tuesday addressed 57 vulnerabilities, including six actively exploited zero-days, while separate incidents described in the report include a data breach at NTT Communications affecting nearly 18,000 corporate customers and multiple active threat campaigns—Blind Eagle exploiting a Windows CVE to deploy Remcos RAT, Desert Dexter distributing a modified AsyncRAT to ~900 victims in MENA, and the Storm-1865 ClickFix phishing operation delivering various RATs and stealers to hospitality targets—illustrating concurrent high-risk vulnerabilities, targeted APT activity and widespread malware campaigns.