Physical Address
304 North Cardinal St.
Dorchester Center, MA 02124
UK domain registry Nominet, which hosts .co.uk domains, has suffered a cyber security incident which it recently confirmed was linked to an internet exploit. new Ivanti VPN vulnerability.
In an email to customers seen by TechCrunch, Nominet warned of an “ongoing security incident” that was being investigated.
Nominet said the hackers accessed its systems through “third-party VPN software provided by Ivanti,” adding that the hack “exploited a zero-day vulnerability,” giving Nominet no time to apply patches.
Ivanti confirmed last week that hackers were exploiting a vulnerability in Connect Secure, a widely used corporate VPN appliance, to breach customers’ networks. Ivanti did not say how many customers were affected, but cybersecurity firm watchTowr Labs told TechCrunch that it had seen “widespread” compromises.
Nominet, the first organization to publicly confirm it was affected by the Ivanti bug, said there is currently “no evidence of a data breach or leak”. The company added that it has restricted access to the VPN software while investigating the incident.
