Post

🧵 THREAD: A federal whistleblower just dropped one of the most disturbing cybersecurity disclosures I’ve ever read. He's saying DOGE came in, data went out, and Russians started attempting logins with new valid DOGE passwords Media's coverage wasn't detailed enough so I dug into his testimony:

Who’s the whistleblower? Daniel Berulis — a senior DevSecOps architect at the National Labor Relations Board (NLRB), formerly with TS/SCI clearance. He just told Congress the Department of Government Efficiency (DOGE) pulled off a covert cyber op inside a federal agency.

@alt-text.bsky.social

They disabled the logs. Berulis says DOGE demanded account creation with no recordkeeping. They even ordered security controls bypassed and disabled tools like network watcher so their actions wouldn’t be logged.

@alt-text.bsky.social

And then the data started flowing out. 10+ GB spike in outbound traffic Exfiltration from NxGen, the NLRB's legal case database No corresponding inbound traffic Unusual ephemeral containers and expired storage tokens

They used an external library that used AWS IP pools to rotate IPs for scraping and brute force attacks. They downloaded external GitHub tools like requests-ip-rotator and browserless — neither of which the agency uses.

This can only be the act of traitors. We are at war as well

Remember several years ago when Steve Bannon declared his admiration for Lenin because he managed to destroy the Russian stare in 1917. Bannon said his hope was to see the destruction of the administrative state in the US.

Treasonous acts and behavior by Doge.