Open Thread | Whistleblower Paints a Frightening Picture

This is absolutely frightening:

Matt Johansen (@mattjay) posted at 7:13 PM on Thu, Apr 17, 2025:

🧵 THREAD: A federal whistleblower just dropped one of the most disturbing cybersecurity disclosures I’ve ever read.

He’s saying DOGE came in, data went out, and Russians started attempting logins with new valid DOGE passwords

Media’s coverage wasn’t detailed enough so I dug into his testimony:

Who’s the whistleblower?

Daniel Berulis — a senior DevSecOps architect at the National Labor Relations Board (NLRB), formerly with TS/SCI clearance.

He just told Congress the Department of Government Efficiency (DOGE) pulled off a covert cyber op inside a federal agency.

DOGE demanded root access.
Not auditor access. Not admin.

They were given “tenant owner” privileges in Azure — full control over the NLRB’s cloud, above the CIO himself.
This is never supposed to happen.

They disabled the logs.
Berulis says DOGE demanded account creation with no recordkeeping.

They even ordered security controls bypassed and disabled tools like network watcher so their actions wouldn’t be logged. https://t.co/5nJexM7wES

And then the data started flowing out.
10+ GB spike in outbound traffic

Exfiltration from NxGen, the NLRB’s legal case database
No corresponding inbound traffic
Unusual ephemeral containers and expired storage tokens

They used an external library that used AWS IP pools to rotate IPs for scraping and brute force attacks.

They downloaded external GitHub tools like requests-ip-rotator and browserless — neither of which the agency uses.

The most daming claim in this statement IMO:

Within 15 minutes of DOGE accounts being created…
Attackers in Russia tried logging in using those new creds.
Correct usernames and passwords.

2 options here. The DOGE device was hacked. And I don’t think I need to explain the 2nd.

Multi-factor authentication? Disabled.
Someone downgraded Azure conditional access rules — MFA was off for mobile.
This was not approved and not logged.

Cost spikes without new resources.
Azure billing jumped 8% — likely from short-lived high-cost compute used for data extraction, then deleted.

Then came the intimidation.

While preparing this disclosure, Berulis found a drone surveillance photo of himself taped to his front door with a threatening note.

This was just a few days ago.

US-CERT was about to be called in.
CISA’s cyber response team.
But senior officials told them to stand down — no report, no investigation.

Matt Johansen (@mattjay) posted at 11:48 PM on Thu, Apr 17, 2025:
Here is the original reporting by NPR on this story – https://t.co/U5i2fNFMJG
(https://x.com/mattjay/status/1913092245521080636?t=g77sQlk30AOns0FbFpUArQ&s=03)

This entry was posted in DOGE, Federal Whistleblower, Open Thread, Politics and tagged , , , , . Bookmark the permalink.

37 Responses to Open Thread | Whistleblower Paints a Frightening Picture

  1. rikyrah says:

    Steven Dennis (@StevenTDennis) posted at 0:49 PM on Wed, Apr 23, 2025:
    President Trump will have an “intimate private dinner” with top 220 buyers of his crypto memecoin at his DC-area golf club, the issuers of the token said on their website. The coin skyrocketed on the news, at one point up 49%… https://t.co/lgyNWm9rN7
    (https://x.com/StevenTDennis/status/1915100677602234862?t=GasUS-2kDeXSIy5FRZSPlA&s=03)

    Chris Murphy 🟧 (@ChrisMurphyCT) posted at 3:19 PM on Wed, Apr 23, 2025:
    This isn’t Trump just being Trump. The Trump coin scam is the most brazenly corrupt thing a President has ever done. Not close.
    (https://x.com/ChrisMurphyCT/status/1915138398714753437?t=OmOdrdgfWhGe90cuCAImqQ&s=03)

  2. rikyrah says:

    Alex Cole (@acnewsitics) posted at 3:41 PM on Wed, Apr 23, 2025:
    BREAKING: Trump will exempt certain carmakers from U.S. tariffs. – Financial Times.

    Trump: Tariffs will make us rich!

    Also Trump: Unless a CEO complains, then never mind lol.

    MAGA got conned again. holy shit! 🤣
    (https://x.com/acnewsitics/status/1915143966082900153?t=8wg5ZgbkrbnmJZBIIJmFGg&s=03)

  3. rikyrah says:

    Scott MacFarlane
    @MacFarlaneNews
    Sec. Pete Hegseth orders makeup studio installed at Pentagon, per
    @cbsnews
    https://x.com/MacFarlaneNews/status/1915107271300005954

  4. rikyrah says:

    Chanteezy Is In Her Rest Era ♉️💛🪷 (@iamchanteezy) posted at 10:41 AM on Wed, Apr 23, 2025:
    Senator Warnock told no lies. The GOP are weaponizing Christianity and saying the Lord’s name in vain for their self gratification. #TheView https://t.co/ORHnQqKzN3
    (https://x.com/iamchanteezy/status/1915068460243013804?t=KPGN_UPM0fTgkGUeIHhd3g&s=03)

  5. rikyrah says:

    Still shuffling and 🦝🦝🦝🦝ing

    He misses the pats on the head.😡😡😡

    Aaron Rupar (@atrupar) posted at 10:52 AM on Wed, Apr 23, 2025:
    Byron Donalds’s use of whataboutism to defend Pete Hegseth on CNN did not go well for him https://t.co/NjAdr5M47r
    (https://x.com/atrupar/status/1915071207356957055?t=OhhG7AAM6rJ5kQm5lU2r9Q&s=03)

  6. rikyrah says:

    Kenny is on point 👏🏾👏🏾👏🏾

    2RawTooReal (@2RawTooReal) posted at 3:34 PM on Tue, Apr 22, 2025:
    Ppp & Student loans https://t.co/iRDUncRLBS
    (https://x.com/2RawTooReal/status/1914779814059274481?t=7v1-tqobB_DXuGjm2LuVjQ&s=03)

  7. rikyrah says:

    🙏🏽🙏🏽🙏🏽He is a fighter.

    ALS is a brutal disease 😢😢😢

    Ms McMichael (@bluebutterflysm) posted at 2:19 PM on Wed, Apr 23, 2025:
    My brother was moved to a hospice care facility today. In heaven, he’ll join our Mom, Dad, & Granny where they’ll talk non-stop 4 a month. 😇 Thank you @chicagobears, fans,@espn, @NFL, & @ProFootballHOF 4 your support of our superstar. 🙏 #SteveMcMichael #TeamMongo #MongoStrong https://t.co/sbd2YsPGdN
    (https://x.com/bluebutterflysm/status/1915123399237697773?t=9v8cT_fX3Upi0p879RAEZQ&s=03)

  8. rikyrah says:

    My phucks are gone. They left November 6, 2024.

    MAGA Cult Slayer🦅🇺🇸 (@MAGACult2) posted at 9:08 AM on Wed, Apr 23, 2025:
    “Do we have one of the best #FAFO stories of the year.” https://t.co/lE4zjfDFj5
    (https://x.com/MAGACult2/status/1915045225661173912?t=XkOAzNlww7FNVNN_6EfIeQ&s=03)

  9. rikyrah says:

    Sam Stein
    @samstein
    NEW: House Ds who went to El Salvador asked for proof of life for Andry Hernández Romero, the gay 19yr old Venezuelan makeup artist. They didn’t get one. No one’s heard from him since March 14.

    “Everyone is extremely worried,” one told
    @Carrasquillo
    https://x.com/samstein/status/1915061877358444560

  10. rikyrah says:

    anyone_want_chips (@anyonewantchips) posted at 8:27 PM on Sun, Apr 20, 2025:
    When Lloyd Austin didn’t notify the WH of his hospitalization, Republicans blew a gasket & called for him to resign – but when Pete Hegseth risks the lives of our pilots by sharing sensitive Yemen war plans on Signal, at least twice – where’s the Republican outrage. https://t.co/MICGhXChse
    (https://x.com/anyonewantchips/status/1914128945844265040?t=JBDTygXhUNLOGsxZfQWZpQ&s=03)

  11. rikyrah says:

    Meidas_Charise Lee (@charise_lee) posted at 5:46 PM on Mon, Apr 21, 2025:
    This is literally what happened last time he was President. Farms needed billions in bailouts. Farmers will go broke and lose their farms. The big Corporations will buy them up. https://t.co/Xy4SyZOwSo
    (https://x.com/charise_lee/status/1914450694641492042?t=w8bTBA0GJIRMaQ-26jTMqg&s=03)

  12. rikyrah says:

    Jesus Freakin Congress (@TheJFreakinC) posted at 8:30 AM on Tue, Apr 22, 2025:
    Trump owes $500 million from his defamation lawsuit. He has not paid it, & owes 175k a day he doesn’t pay. They are not garnishing his wages or assets.

    Meanwhile, his administration just ruled that student loans, that are not being paid, will be garnished from American’s wages.
    (https://x.com/TheJFreakinC/status/1914673206159348060?t=XGRj49zjCPw_hS7Ck60Mzg&s=03)

  13. rikyrah says:

    Symone D. Sanders Townsend (@SymoneDSanders) posted at 2:30 PM on Tue, Apr 22, 2025:
    No better proof the richest and most our of touch people in the country are in charge than this crazy policy actually making out of a meeting in THIS economy.

    Insane.
    (https://x.com/SymoneDSanders/status/1914763717084107178?t=wkargNPnOtWkUfzpJBAFaA&s=03)

  14. rikyrah says:

    More Perfect Union (@MorePerfectUS) posted at 1:48 PM on Tue, Apr 22, 2025:
    BREAKING: Trump’s Press Secretary Karoline Leavitt just said: “The government can and will collect defaulted federal student loan debt by withholding tax refunds, federal pensions, and even their wages.” https://t.co/RebofaQiy0
    (https://x.com/MorePerfectUS/status/1914753229126296014?t=a12cidULcmY_42UYlkC75A&s=03)

  15. rikyrah says:

    Jacob Perry 🇺🇲 🇺🇦 🇮🇱 (@RealJacobPerry) posted at 0:12 PM on Tue, Apr 22, 2025:
    So, if you hadn’t heard, the Desantii (both Ron Ron and Evita) took $10 million from Medicare and directed it to campaign donors, who funneled to Ron Ron’s chosen causes.

    People had better be going to jail. #FlaPol

    https://t.co/2mMlrewDK0
    (https://x.com/RealJacobPerry/status/1914728908924080226?t=AwglmYm6As7vg03GzlEjRQ&s=03)

  16. rikyrah says:

    Christopher Webb (@cwebbonline) posted at 0:39 PM on Wed, Apr 23, 2025:
    You need to watch this.

    Mahmoud Khalil and Rumeysa Ozturk are being held indefinitely—no charges, no due process, no explanation.

    They don’t even know why they’re locked up. That’s not justice or American. https://t.co/LIGyYfzaBz
    (https://x.com/cwebbonline/status/1915098212438069748?t=sInsaTb3SPfltGQlWIyh5g&s=03)

  17. rikyrah says:

    Barack Obama (@BarackObama) posted at 11:28 AM on Wed, Apr 23, 2025:
    As an Illinois voter, I couldn’t be prouder that our senator for the last 28 years has been one of the finest in the country. Dick Durbin has always fought the good fight on behalf of working families, and his integrity shines through in everything he does.

    It’s also true that I would not have been a United States Senator – and certainly would not have been President – had it not been for Dick’s support. He has been a great and loyal friend, and Michelle and I wish him and Loretta all the best in their next chapter.
    (https://x.com/BarackObama/status/1915080417876517007?t=lKJrIOBFUiiFEu02PL5axg&s=03)

  18. rikyrah says:

    Dana Bash (@DanaBashCNN) posted at 0:35 PM on Wed, Apr 23, 2025:
    “I’m confident that Pete Hegseth can still be – and will be – a great Secretary of Defense. He’s gonna need some help around him. I think one of the things he has lacked in the early days is some real expertise, institutional expertise, in the building.” – @SenKevinCramer tells me on @InsidePolitics, adding that he talked to President Trump about this situation earlier today.
    – @SenKevinCramer tells https://t.co/Yof0CJBYkD
    (https://x.com/DanaBashCNN/status/1915097220942123451?t=c5uGj4_9cBc79QCoBoee2A&s=03)

    emptywheel (check) (@emptywheel) posted at 0:45 PM on Wed, Apr 23, 2025:
    This is right wing logic for you.

    WAHHAHHHAHHAHH end DEI bc we have to hire on merit!!!!!

    But we have to give @PeteHegseth a year on training wheels and 5 handlers to make up for the fact that he’s totally unqualified for the job and is failing in spectacular fashion.
    (https://x.com/emptywheel/status/1915099804935258453?t=OpYS3_hg43tXb-XPuzMpeQ&s=03)

  19. rikyrah says:

    U.S. citizen wrongly detained by Border Patrol says government account is false
    Jose Hermosillo was held in a detention facility for undocumented immigrants for 10 days.
    Judd Legum
    Apr 23, 2025

    On April 8, Jose Hermosillo, a 19-year-old U.S. citizen, was wrongfully incarcerated by immigration authorities in Arizona, who claimed he was an undocumented immigrant. He was held for 10 days at Florence Correctional Center, a privately run immigration detention facility, before being released on April 17.

    These facts are not disputed.

    On X, the Department of Homeland Security (DHS) said, “Hermosillo’s arrest and detention were a direct result of his own actions and statements.” According to DHS, “Jose Hermosillo approached Border Patrol in Tucson Arizona stating he had ILLEGALLY entered the U.S. and identified himself as a Mexican citizen.” DHS also released what purports to be a transcript of Hermosillo’s conversation with a Border Patrol agent signed “JOSE.” In the transcript, Hermosillo allegedly said he was born in Mexico, was a citizen of Mexico, and entered the United States illegally.

    In an interview with Popular Information, Hermosillo said DHS’s account was false.

    https://popular.info/p/us-citizen-wrongly-detained-by-border

  20. rikyrah says:

    US Justice Department cancels hundreds of grants for police, crime victims

    WASHINGTON, April 23 (Reuters) – The U.S. Justice Department has canceled hundreds of ongoing grants that funded everything from services for mental health care for police officers to support programs for victims of crime and sexual assault, according to internal records and four people familiar with the matter.

    At least 365 grants from the Office of Justice Programs, the department’s largest grant-making arm, were terminated late on Tuesday, said two of the people, who were granted anonymity to discuss details that have not been made public.

    Among the programs that are being targeted include grants that supported transgender victims of crime, hotlines used by crime victims, human trafficking grants awarded to organizations that work with immigrants and refugees, programs to curb juvenile delinquency and safeguard incarcerated youth, and funding to help state-run hate crime reporting, according to a partial list of terminated grants seen by Reuters.

    Many Justice Department’s employees who work on managing and awarding the grants did not learn about the cancellations until the grantees were notified on Tuesday, the people said.

    https://www.reuters.com/world/us/us-justice-department-cancels-hundreds-grants-police-crime-victims-2025-04-23/

  21. rikyrah says:

    AOL.com
    @AOL
    RFK Jr. Says Autism Rates Have Bigger Impact Than COVID ‘Because COVID Killed Old People’
    Source: People

    To read more, click the image below.
    https://x.com/AOL/status/1914110684842905855

  22. rikyrah says:

    Aaron Reichlin-Melnick (@ReichlinMelnick) posted at 1:55 PM on Tue, Apr 22, 2025:
    There are as many as 31 people sent to be imprisoned without a trial in El Salvador by the United States government that we don’t even know the names of.

    This is the definition of a “disappearance.” Neither El Salvador or the United States will say who they’re imprisoning.
    (https://x.com/ReichlinMelnick/status/1914754871951045072?t=akHEuCRhG0V1LbUg2F-NmA&s=03)

  23. rikyrah says:

    Red State Rebel Resists (@ResistanceInRed) posted at 9:43 AM on Tue, Apr 22, 2025:
    Kseniia Petrova, a 30-year-old Russian scientist at Harvard Medical School, poured her heart into a groundbreaking microscope project that could save countless lives by revolutionizing cancer detection. But on Feb 16, 2025, her world shattered. ICE detained her at Boston’s Logan Airport over a minor issue—failing to declare frog embryo samples for her research. They stripped her of her J-1 visa and locked her in a Louisiana detention center for over two months, far from her lab, her colleagues, and her purpose. She’s now fighting deportation to Russia, where she faces persecution for bravely protesting the Ukraine war. Her work—our hope for a future with better cancer treatments—sits stalled, possibly lost forever. This is who Trump and his cruel regime are targeting, humiliating, and tearing down. They’re not protecting America; they’re breaking it apart with fear, preying on the vulnerable—immigrants like Kseniia who only want to make the world better. And to Trump voters who cheered for this—do you feel proud now, knowing you’re complicit in crushing a scientist’s dreams and humanity’s progress? It’s absolutely heartbreaking and utterly disgusting.
    #DemsUnited #TrumpIsUnfitForOffice #ImpeachTrump
    (https://x.com/ResistanceInRed/status/1914691471443202484?t=XCkZ_WcJxd6uwhVj8BWgqQ&s=03)

  24. rikyrah says:

    Charles Gasparino (@CGasparino) posted at 1:18 PM on Tue, Apr 22, 2025:
    BREAKING: Ive been told by a person close to @SecScottBessent the reports on his remarks about a trade deal with China have being imminent overstate what he said. He meant that there is room for talks and de-escalation but much also depends on China’s willingness to compromise on
    (https://x.com/CGasparino/status/1914745637624848832?t=zb9nB64re_g3Im5NVag3Iw&s=03)

    Stephanie Ruhle (@SRuhle) posted at 3:00 PM on Tue, Apr 22, 2025:
    So is weekly market manipulation going to be the hedge against daily losses caused by chaotic trade policy?
    (https://x.com/SRuhle/status/1914771236913123338?t=mEn8z2-FZooX72g8WMMIlg&s=03)

  25. rikyrah says:

    Kyle Cheney (@kyledcheney) posted at 1:56 PM on Tue, Apr 22, 2025:
    BREAKING: A federal judge has ordered the Trump administration to restore Voice of America and several affiliated news services, finding the Trump administration’s efort to dismantle it likely violated the law. https://t.co/GjLdN3FrUX https://t.co/g4EOwGC616
    (https://x.com/kyledcheney/status/1914755258862940365?t=0PTssBCFs9rmJztjw8jmmg&s=03)

  26. rikyrah says:

    elle (pls share my 📌) (@scretladyspider) posted at 9:22 PM on Mon, Apr 21, 2025:
    So. Uhm. Apparently. they’re launching a new “disease registry” to track autistic people.

    read that again.

    They are launching.

    a new disease registry.

    to track autistic people.

    a DISEASE REGISTRY. to TRACK. AUTISTIC PEOPLE.

    https://t.co/8osz37Vp1e
    (https://x.com/scretladyspider/status/1914505117799170270?s=02)

  27. rikyrah says:

    The Intellectualist (@highbrow_nobrow) posted at 7:01 PM on Tue, Apr 22, 2025:
    The FDA is planning to halt most routine food safety inspections, shifting oversight to state and local authorities, CBS News reports. The move follows mass HHS layoffs and raises concerns about diminished federal oversight and strained local food safety programs. https://t.co/jXsuTzkHnX
    (https://x.com/highbrow_nobrow/status/1914831886796390405?t=WAuzWRqT1hAvaJM4FuRl5w&s=03)

  28. rikyrah says:

    Lying azz muthaphuckas😠😠😠😠

    American Bridge 21st Century (@American_Bridge) posted at 0:29 PM on Tue, Apr 22, 2025:
    BREAKING: House Republicans preview their new strategy for cutting Medicaid — removing federal funding for state Medicaid expansion.

    “Nobody would be kicked off of Medicaid AS LONG as the governors decided that they wanted to continue to fund the program.” https://t.co/WpiDvlqVTV
    (https://x.com/American_Bridge/status/1914733247420096738?s=02)

  29. rikyrah says:

    Alex Cole (@acnewsitics) posted at 6:24 AM on Wed, Apr 23, 2025:
    Volvo is laying off hundreds of workers in deep red districts where Trump won because of tariffs. MAGAs losing their jobs to own the libs!
    https://t.co/wKt0bBYQrd
    (https://x.com/acnewsitics/status/1915003853743022365?t=G9Stnt22KrS70PmYo9-NTw&s=03)

  30. rikyrah says:

    ET (@BET) posted at 9:42 AM on Wed, Apr 23, 2025:
    From Kinshasa to the Vatican, Cardinal Fridolin Ambongo Besungu is being considered as a potential successor to Pope Francis. His advocacy for peace and social justice has garnered global attention.

    Could the next pope be African? https://t.co/pBYQFst8hU
    (https://x.com/BET/status/1915053597978497352?t=M8atJVfjAOT0bFxj_KCEnA&s=03)

  31. rikyrah says:

    NO HOME TRAINING.

    Jack Detsch (@JackDetsch) posted at 7:38 PM on Tue, Apr 22, 2025:
    NEW: Departing Hegseth chief of staff Joe Kasper ran into trouble at DOD by berating officials in meetings, calling military officials by a lower rank on purpose, and even graphically describing his bowel movements in high-level meetings.

    Reporting in @politico tonight: https://t.co/HMcJk9i3Xa
    (https://x.com/JackDetsch/status/1914841180782633370?t=U7gGy3wvpEBGwxvtR7uu0g&s=03)

  32. rikyrah says:

    Durbin is retiring.

    I’m all in for Senator Lauren Underwood. 

  33. rikyrah says:

    Mario 🇺🇸🇵🇱🇺🇦🇪🇺
    @PawlowskiMario
    I’m autistic
    And when I heard RFK Jr. wants a government registry to track people like me
    using private medical records
    I didn’t think “safety”
    I thought Nazi Germany
    A roundup’s of disabled people

    Because I know history
    And I know exactly what comes after the list is made

    This isn’t about health
    This is about control
    It’s about fear
    It’s about marking people
    People like me
    Neurodivergent people
    Different people

    Don’t dress it up as policy
    This is how roundups begin

    You want to stop autism discrimination?
    Start by not creating a fucking list

    https://x.com/PawlowskiMario/status/1914732873807970536

  34. rikyrah says:

    Chris D. Jackson
    @ChrisDJackson
    🚨 According to Gallup, a record-high 53% of Americans say their financial situation is getting worse—the first majority saying so since 2001.

    Meanwhile, Trump’s busy golfing and tanking the stock market with every tantrum.

    Welcome to the Golden Age! 😂
    https://x.com/ChrisDJackson/status/1914782862399737904

  35. rikyrah says:

    Good Morning Everyone 😊😊😊

Leave a Reply to rikyrahCancel reply