Notices by cR0w :cascadia: (cr0w@infosec.exchange)

Puget Sound Energy, one of the largest utilities in the PNW, is hiring a risk analyst. Must be Washington-based. I know some of the people on that team and and it's a legit position they're filling, not a ghost job.

https://jobs.pse.com/job/Snoqualmie-Senior-IT-Security-Analyst-WA-98065/1262729300/

#fediHired #infosecJobs

https://www.crowdstrike.com/security-advisories/cve-2025-1146/

@buherator @silverwizard Of course. But the face of the company is the face of the company and criticism and mockery are fair, especially given the history of the org.

@buherator @silverwizard That's true. The wording on it is very self-backpatty though.

@Sempf

@patrickcmiller Weird that it doesn't call out the risk of PAN not shipping timely patches for industrial devices running PAN-OS. 🤔

For those new to INFOSEC, keep in mind that the people in fursuits breaking "military grade" crypto will always trump people in business suits crying about "Cyber Pearl Harbor". This toot made for no reason in particular today.

@paco @shellsharks They've already accomplished more than any of my bitching and memeing. :blobsalute:

To the leader! 🍻

So how tough is it to get a children's book published? Someone ( I'll just call them --sharks to protect their identity. No, wait, shell-- is better. ) is passing around terrible ideas and I'm not good at passing up terrible ideas. So I'm thinking a kids coloring book of the alphabet of *ishing . There has to be a market, right? Like RSA? All those orgs who can't figure out a proper acronym for their beloved Cybersecurity Awareness Month?

@silverwizard @jcrabapple @shellsharks Good thing we don't already have smishing for that. Oh wait...

@silverwizard @jcrabapple @shellsharks It was something like "malicious PDF to mobile devices" and I guess since "mobile" starts with an "m" they thought that makes sense? IDK. I'm using that one because I want to call it out as bad.

@shellsharks @jcrabapple @silverwizard I just fount it and WTF that article was just last week? It feels like months ago.

@shellsharks @jcrabapple @silverwizard The absolute best part is that it's been such a long year that I forgot what mishing was supposed to be. 😆

@jcrabapple @shellsharks @silverwizard Professional security stuff. And definitely only good ideas.

@silverwizard @shellsharks Why did I start reading that in Yakko's voice?

@silverwizard @shellsharks a bottomless hole is better than a holeless bottom sorry i should log off now

@shellsharks It's my new tactic: If you can't beat them, make it so cringe that they stop doing it.

Okay I made an effort this morning but it's really hard to give a fuck about vulns and breaches today so here's a quick rundown on what I would be posting more details about in a previous life:

Samsung mobile is shit. New CVEs, look for patches if you care.

Mozilla has more CVEs for Thunderbird and Firefox. Check for patches.

Zyxel is Zyxel. Good luck if you run their kit anyway.

A couple CVEs on a Supermicro board but IDK anything about it. Ask Bloomberg for details.

Anyway, have a good day. Take care of each other.

Anyone else see this on Android? I don't like it. Refreshing and rebooting don't help.

@reverseics @da_667 This is one of my pistol bags.