MONTHLY SECURITY RECAP 04/2025

Sec-Gemini v1

Google has introduced Sec-Gemini v1, an experimental AI model designed specifically for cybersecurity that extends the capabilities of the core Gemini model.

The power of Sec-Gemini v1 lies in its integration with key security data sources. The model is connected to Google Threat Intelligence (GTI) for a global view of current threats, the Open Source Vulnerabilities (OSV) database for vulnerabilities in open source solutions, and Mandiant Threat Intelligence, which provides detailed information on attack group tactics, techniques and procedures.

Fortinet

Several critical vulnerabilities have been identified in Fortinet products, specifically in SSL VPN solutions and FortiSwitch devices, that could allow attackers to take full control of affected systems.

The most serious of these threats is the CVE-2024–55591 0-day vulnerability affecting FortiOS (7.0.0–7.0.16) and FortiProxy.

CVE

The US government has extended funding for the Common Vulnerabilities and Exposures (CVE) programme, managed by MITRE, at the last minute. The contract was originally set to expire on 16 April 2025, but has been extended by 11 months, averting a hiatus that could have seriously disrupted the global cybersecurity ecosystem. The decision to extend the contract was announced by the Cybersecurity and Infrastructure Security Agency (CISA) shortly before the original contract was due to expire.

Russian hackers

Security experts at Volexity have uncovered a dangerous campaign in which Russian hacking groups UTA0352 and UTA0355 are exploiting legitimate Microsoft authentication mechanisms to gain access to the accounts of key individuals associated with Ukraine. The attacks, which have been ongoing since March 2025, are highly sophisticated because they do not use malware or suspicious applications — instead, they manipulate Microsoft’s legitimate OAuth workflow. The attackers are primarily targeting human rights organisations, diplomatic missions and government institutions supporting Ukraine.