MSP cybersecurity news digest, December 29, 2025

### Executive Summary This report aggregates several high-risk incidents: a ransomware attack that knocked ~1,000 computers offline across Romania’s water authority, active exploitation of the “MongoBleed” memory-disclosure vulnerability affecting ~87,000 Internet-exposed MongoDB servers, a critical RCE (CVE-2025-68613, CVSS 9.9) in n8n prior to 1.120.4, malicious Chrome extensions harvesting credentials across 170+ sites, and an alleged WIRED subscriber database breach claiming 2.3M records — together signifying immediate and broad risks to critical infrastructure, data confidentiality, and downstream services.