UK domain giant Nominet confirms cybersecurity incident linked to Ivanti VPN hacks

Nominate, the UK domain registry that maintains .co.uk domains, has experienced a cyber security incident that it has confirmed is linked to recent exploits. A new Ivanti VPN vulnerability.

In an email to customers seen by TechCrunch, Nominate warned of an “ongoing security incident” under investigation.

Nominet said the hackers accessed its systems through “third-party VPN software provided by Ivanti,” adding that the intrusion “exploited a zero-day vulnerability,” giving Nominet time to apply a patch.

Ivanti confirmed last week that hackers exploited a vulnerability in Connect Secure, its widely used enterprise VPN appliance, to gain access to customers’ networks. Ivanti didn’t say how many customers were affected, but cybersecurity firm Watchtower Labs told TechCrunch it had seen “extensive” compromises.

Nominate, which was the first company to publicly confirm that it was affected by the Evanti bug, said it currently has “no evidence of a data breach or leak.” The company added that it has restricted access to the VPN software while it investigates the incident.