{"id":4027,"date":"2025-04-17T17:20:01","date_gmt":"2025-04-17T17:20:01","guid":{"rendered":"https:\/\/nationalgunowner.org\/index.php\/2025\/04\/17\/cybersecurity-crisis-unfolds-as-trump-cuts-cve-and-russians-hack-doge\/"},"modified":"2025-04-17T17:20:05","modified_gmt":"2025-04-17T17:20:05","slug":"cybersecurity-crisis-unfolds-as-trump-cuts-cve-and-russians-hack-doge","status":"publish","type":"post","link":"https:\/\/nationalgunowner.org\/index.php\/2025\/04\/17\/cybersecurity-crisis-unfolds-as-trump-cuts-cve-and-russians-hack-doge\/","title":{"rendered":"Cybersecurity Crisis Unfolds as Trump Cuts CVE and Russians Hack DOGE"},"content":{"rendered":"
\n
Elon Musk, rendered in a Warhol-esque grid of performative genius, now presides over a shadow agency accused of letting Russian actors into federal systems. The performance continues\u2014even as the fire spreads. Getty Images<\/span><\/figcaption><\/figure>\n

Last week, this column <\/span>warned<\/span><\/a> that President Donald Trump<\/a> is playing politics with American cybersecurity as our adversaries prepare for war, while a possible \u201cCyber Pearl Harbor\u201d looms. This week, things have only gotten worse.<\/span><\/p>\n

\n<\/section>\n

The cybersecurity world was stunned by Tuesday\u2019s <\/span>revelation<\/span><\/a> that the administration plans to immediately cease federal funding for the Common Vulnerabilities and Exposures Program, which since 1999 has served as a public clearinghouse for identified information security vulnerabilities and exposures. For a quarter-century, the <\/span>CVE Program<\/span><\/a> had been funded by the federal government, for most of that time via the Department of Homeland Security, and hosted by the MITRE Corporation, a federally-funded research and development center (that is, a think-tank bankrolled by the feds).<\/span><\/p>\n

Since the CVE Program isn\u2019t involved in any politics and was considered wholly uncontroversial in the cybersecurity world, news of its abrupt cancellation left many experts aghast. Why did the Trump administration seek to kill such a linchpin of global cybersecurity, which provides the public with critical data and services for digital defense and research? One Washington, DC, cyber-guru with long experience in the industry, whom I\u2019ve known for years, termed the move \u201cincomprehensible\u201d and \u201calmost impossible to explain outside sheer stupidity.\u201d<\/span><\/p>\n

Outrage over the cancellation of the CVE Program, for no apparent reason and without White House explanation, mounted fast. Another needless public relations debacle wasn\u2019t what Team Trump needed, and it\u00a0<\/span>was rescued by the rapid action taken by the Cybersecurity and Infrastructure Security Agency. CISA offered the CVE Program\u00a0a lifeline<\/a> with a contract extension and incremental funding to keep it alive, but only for 11 months. This is a temporary fix, a jury-rigged cyber band-aid<\/span>\u2014not a bona fide solution.\u00a0<\/span><\/p>\n

Besides, the Trump administration has its knives out for CISA too, with <\/span>reported plans<\/span><\/a> to terminate one-third of its workforce. The administration\u2019s animus towards CISA, and American cybersecurity generally, was made plain by the president\u2019s <\/span>announcement<\/span><\/a> last week that he\u2019s pulling the security clearances of Chris Krebs<\/a>, Trump\u2019s own choice to head CISA in his first term, due to Krebs\u2019 insufficient fealty to Trump and the MAGA cause. Trump publicly denounced Krebs as \u201ca traitor\u201d while placing him under Justice Department investigation.<\/span><\/p>\n

Krebs is a widely respected figure in the cyber world, and his targeting by the White House sent a chill throughout the community. Now, his career has fallen apart. Pulling the security clearances of Krebs and those associated with him effectively killed his private cybersecurity firm, SentinelOne. Krebs has just stepped aside to save the firm, <\/span>announcing<\/span><\/a> that he will fight the Trump administration, a struggle that \u201c will require my complete focus and energy. It\u2019s a fight for democracy, for freedom of speech, and for the rule of law. I\u2019m prepared to give it everything I\u2019ve got.\u201d<\/span><\/p>\n

Why the Trump administration is choosing to accelerate its war against American cybersecurity, without any detectable concern for its national security ramifications, is a question nobody outside the White House can truly answer yet. Dark thoughts have entered the conversation thanks to claims made by a whistleblower this week regarding alleged cyber malfeasance by employees of Elon Musk<\/a>\u2019s Department of Government Efficiency. According to the <\/span>complaint<\/span><\/a>, which was addressed to the leadership of the Senate Intelligence Committee, the whistleblower is Daniel Berulis<\/a>, an IT staffer at the National Labor Relations Board.<\/span><\/p>\n

Berulis asserts that DOGE staffers assigned to the NLRB, ostensibly to assess its effectiveness, engaged in suspicious and possibly illegal activities, based upon their unusually broad access to NLRB\u2019s IT systems, including seeing sensitive case files. Berulis claims that he detected DOGE\u2019s removal of some 10 gigabytes worth of data from NLRB\u2019s network, and that his efforts to alert CISA about this unusual activity were thwarted by his superiors.<\/span><\/p>\n

Most seriously, during an appearance this week on CNN, Bertulis<\/span>, with his attorney, amplified his accusations. In particular, his attorney\u00a0claimed<\/a> that DOGE was letting Russians into NLRB systems by giving them \u201cusernames and passwords. Within<\/span>\u00a015 minutes of those accounts being created, somebody or something from Russia tried to log in with the right username and right passwords\u2014that is to say, the right credentials. And that happened over 20 times.\u201d<\/span><\/p>\n

That claim, if true, is astonishing and raises grave counterintelligence concerns about DOGE and its true agenda. Since Musk has hired dubious characters to staff DOGE, including <\/span>known hackers<\/span><\/a> and associates of <\/span>cyber criminals<\/span><\/a>, none of whom have received standard federal security vetting, many unsettling scenarios are possible.<\/span><\/p>\n

It\u2019s no surprise that DOGE, with its cavalier attitude towards basic security procedures, was <\/span>recently denounced<\/span><\/a> as an unprecedented \u201ccounterintelligence nightmare\u201d by Michelle Van Cleave<\/a>, the former boss of U.S. counterintelligence. Revealingly, Van Cleave, who was appointed by President George W. Bush<\/a> and is no left-winger, left open the possibility that Musk may be secretly serving America\u2019s enemies as DOGE tears apart the federal government. It doesn\u2019t reassure that Russian President Vladimir Putin<\/a> <\/span>just hailed<\/span><\/a> Musk as a heroic figure while comparing him to pioneering Soviet cosmonauts of the 1960s.<\/span><\/p>\n

Perhaps it\u2019s no wonder that President Trump doesn\u2019t fully trust his First Buddy<\/span>, either. Last month, Trump\u00a0cancelled<\/a> Musk\u2019s involvement in a Top-Secret Pentagon briefing on U.S. war plans against China since the president assessed that the DOGE head \u201chas a\u00a0<\/span>lot of business in China and he has good relations there, and this briefing just wasn\u2019t the right thing.\u201d<\/span><\/p>\n

If Elon Musk isn\u2019t trustworthy enough to be briefed on Top-Secret information, why has he been empowered to reshape the federal government without any effective oversight?<\/span><\/p>\n

John R. Schindler served with the National Security Agency as a senior intelligence analyst and counterintelligence officer\u00a0<\/span><\/i><\/p>\n

\t\t\t\t\"Trump<\/p><\/div>\n