MSP cybersecurity news digest, July 7, 2025

This briefing covers multiple concurrent cyber threats: Google released a patch and mitigation for an actively exploited Chrome V8 zero-day (CVE-2025-6554) added to CISA’s KEV catalog; Qantas disclosed a breach of six million customer records via a third‑party platform; Zurich nonprofit Radix was struck by Sarcoma ransomware with 1.3TB of data published; North Korean-linked actors deployed a new NimDoor malware family against Web3/crypto targets on macOS; and rising TOAD callback phishing campaigns are abusing PDF attachments and fake support numbers. The report urges prompt patching, investigation of exposures, and heightened defenses against social engineering and credential theft.