UK Domain Drama: Nominet’s Network Breach Exposes VPN Vulnerability Shenanigans
Nominet, the .UK domain registry, fell victim to a breach via an Ivanti VPN zero-day vulnerability. Suspected Chinese hackers are linked to the incident, but no data leak evidence has been found. A security breach without a data breach—like a magician pulling a rabbit out of an empty hat.
Hot Take:
Looks like Nominet’s network was breached by hackers who used a zero-day vulnerability in Ivanti VPN software, but good news, they didn’t find any backdoors. Guess the hackers were just window shopping!
Key Points:
- Nominet, managing over 11 million domains, was breached via an Ivanti VPN zero-day vulnerability.
- No evidence yet of any data breach or backdoors deployed, but the investigation is ongoing.
- The attack has been linked to a suspected Chinese espionage group using the Spawn malware toolkit.
- Ivanti had already released a patch for the zero-day vulnerability exploited in the attack.
- Nominet reported the attack to relevant authorities and restricted VPN access to its systems.
Already a member? Log in here