212 New Venezuela Earthquake Domains Prompt Donation Scam Warnings

Multiple security items: researchers identified 212 newly-registered domains exploiting Venezuela’s earthquake to run donation scams and warn donors to verify relief sites. A new phishing-as-a-service (Bluekit) uses browser-in-the-middle techniques to steal accounts and evade detection. Woodgnat threat actors deploy the stealthy Mistic RAT as a brokered backdoor to sell network access to ransomware gangs. A macOS XPC vulnerability allowed standard users to disable CrowdStrike and Kandji endpoint agents (vendors issued patches after disclosure). Other industry notes include Cyberbit closing its