UK domain name specialist Nominet confirms cyber security incident linked to Ivanti VPN hacks

Nominet, the UK domain registrar that hosts .co.uk domains, has experienced a cybersecurity vulnerability that it has determined is related to its recent use. Ivanti VPN new vulnerability.

In an email to customers, seen by TechCrunch, Nominet warned of an “ongoing security incident” that was being investigated.

Nominet said the hackers gained access to its system through “a third-party VPN software provided by Ivanti,” adding that the intrusion “disrupted the zero-day vulnerability,” giving Nominet no time to apply patches.

Ivanti confirmed last week that hackers had exploited a vulnerability in Connect Secure, a tool widely used in business VPNs, to gain access to customer networks. Ivanti did not say how many customers were affected, but cybersecurity firm WatchTowr Labs told TechCrunch that it had seen “widespread” disruptions.

Nominet, which is the first organization to publicly confirm that it has been affected by the Ivanti virus, said that there is currently “no evidence of a breach or data leak.” The company added that it is suspending the use of the VPN app while it investigates the incident.