"A government whistleblower told lawmakers that DOGE's access to National Labor Relations Board (NLRB) systems went far beyond what was needed to analyze agency operations and apparently led to a data breach. NLRB employee Daniel Berulis, a DevSecOps architect, also says he received a threat when he was preparing his whistleblower disclosure.

"Mr. Berulis is coming forward today because of his concern that recent activity by members of the Department of Government Efficiency ('DOGE') have resulted in a significant cybersecurity breach that likely has and continues to expose our government to foreign intelligence and our nation's adversaries," said a letter from the group Whistleblower Aid to the Senate Select Committee on Intelligence leaders and the US Office of Special Counsel.

The letter, Berulis' sworn declaration, and an exhibit with screenshots of technical data are available here. "This declaration details DOGE activity within NLRB, the exfiltration of data from NLRB systems, and—concerningly—near real-time access by users in Russia," Whistleblower Aid Chief Legal Counsel Andrew Bakaj wrote. "Notably, within minutes of DOGE personnel creating user accounts in NLRB systems, on multiple occasions someone or something within Russia attempted to login using all of the valid credentials (e.g. Usernames/Passwords). This, combined with verifiable data being systematically exfiltrated to unknown servers within the continental United States—and perhaps abroad—merits investigation."

Bakaj said they notified law enforcement about an "absolutely disturbing" threat Berulis received on April 7."

https://arstechnica.com/tech-policy/2025/04/government-it-whistleblower-calls-out-doge-says-he-was-threatened-at-home/

Elon Musk wearing a T-shirt with the word "DOGE" printed on the front.

Ars Technica · 1dGovernment IT whistleblower calls out DOGE, says he was threatened at homeBy Jon Brodkin

#USA #Trump #DOGE

**jbz** @jbz@indieweb.social · 16m

16m

jbz @jbz@indieweb.social

CISA extends funding to ensure 'no lapse in critical CVE services' | @BleepingComputer

"The CVE Program is invaluable to cyber community and a priority of CISA," the U.S. cybersecurity agency told BleepingComputer. "Last night, CISA executed the option period on the contract to ensure there will be no lapse in critical CVE services. We appreciate our partners' and stakeholders' patience."

https://www.bleepingcomputer.com/news/security/cisa-extends-funding-to-ensure-no-lapse-in-critical-cve-services/

#cve #cisa #uspol

**BeyondMachines** @beyondmachines1@infosec.exchange · 17m

17m

BeyondMachines @beyondmachines1@infosec.exchange

Critical authentication vulnerability reported in Yokogawa Recorder Products
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/critical-authentication-vulnerability-reported-in-yokogawa-recorder-products-e-m-7-e-n/gD2P6Ple2L

BeyondMachinesCritical authentication vulnerability reported in Yokogawa Recorder ProductsA critical security vulnerability (CVE-2025-1863, CVSS 9.3) in Yokogawa industrial recorder products allows unauthorized remote access to all settings and operations functions due to authentication being disabled by default on networked devices. The flaw affects multiple Yokogawa recorder product lines and versions. Yokogawa recommends mitigating the risk by enabling authentication and changing default passwords.

**urlDNA.io** @urldna@infosec.exchange · 18m

18m

urlDNA.io @urldna@infosec.exchange

Possible Phishing
on: hxxps[:]//support-validations-business-with-id100037444794[.]vercel[.]app/business[.]html/index[.]html/
Analysis at: https://urldna.io/scan/68025e483b7750000e6c91db
#cybersecurity #phishing #infosec #urldna #scam #infosec

**LimaCharlie** @limacharlieio@infosec.exchange · 18m

18m

LimaCharlie @limacharlieio@infosec.exchange

It's Defender Fridays time! Grab your coffee and join us at 10:30am PT / 1:30pm ET to hear Eoin Wickens from Hidden Layer discuss security for AI.

Register here: https://info.limacharlie.io/defender-fridays?utm_source=organic_social&utm_medium=organic_social&utm_content=webinar&utm_campaign=defender_fridays&utm_term=&lead_source_detail=mastodon

#cybersecurity #defenders #infosec

**AAKL** @AAKL@infosec.exchange · 20m

20m

AAKL @AAKL@infosec.exchange

Cato: Inside Shadow AI – Real-World Generative AI Application Usage Trends in SASE https://www.catonetworks.com/blog/cato-ctrl-inside-shadow-ai/ #cybersecurity #Infosec #AI

Cato Networks · 15hCato CTRL™ Threat Research: Inside Shadow AI – Real-World Generative AI Application Usage Trends in SASE CatoCTRL analyzed GenAI usage from the Cato SASE Cloud Platform and uncovered notable trends. Read the blog

**Valerie's Mutual Aid Alt** @d4rkness@eldritch.cafe · 22m

22m

Valerie's Mutual Aid Alt @d4rkness@eldritch.cafe

Please donate, i need immediate funds to afford basic necessities like food, hrt, new glasses, etc. i didnt get enough money last week to afford anything i needed. please donate to help me survive. i live in an abusive and transphobic household. my family neglects and harasses me constantly for being transgender. please help.

current goals:

immediate necessary expenses: 0$/250$

prescription glasses: 0$/250$

hrt blood tests: 0$/200$

payment information:

cashapp: https://cash.app/vparagon

gofundme: https://gofund.me/034cef1a

cashapp referral (i make 5$): https://cash.app/app/QPL1BJF

monero address: 8576pqM8cmNW92eogjqnYzEewZbmwUbY61xRcGmbVCFphchaXKyAad1Xj9oNrYWQNqZkcm2kCHEzea4Y5Wd3DMUW4DozSV2

@mutualaid @disability @trans @vegan