MSP cybersecurity news digest, August 13, 2025

CISA issued an emergency directive for a critical Exchange hybrid vulnerability (CVE-2025-53786) that can allow on-premises admin access to escalate into Exchange Online, urging immediate patching and credential resets; researchers also flagged multiple SharePoint flaws used in ToolShell exploit chains. Threat reports detail Akira and Lynx ransomware targeting MSPs and SMBs, a major DaVita breach exposing ~915K records claimed by Interlock, ongoing Salesforce data-theft campaigns by ShinyHunters affecting major brands, and a $19M phishing loss by a New York property manager — collectively demonstrating high-impact, multi-vector threats with confirmed breaches, active extortion, and published IOCs.