MSP cybersecurity news digest, June 18, 2025

Microsoft’s June 2025 Patch Tuesday fixes 66 vulnerabilities including an actively exploited WebDAV zero-day (CVE-2025-33053) attributed to APT “Stealth Falcon” and an SMB client privilege-escalation issue (CVE-2025-33073); organizations are urged to apply patches or mitigations. The report also catalogs multiple active incidents: ransomware outages at South Korea’s Yes24 and a major Vietnamese energy firm, a Discord-based campaign distributing AsyncRAT and Skuld Stealer via hijacked vanity links and social-engineering, disruptions at UNFI and WestJet, and a Fog ransomware case that abused legitimate pentesting and monitoring tools — collectively highlighting high-risk active exploitation, data exposure concerns, and widespread operational impacts.