Tuesday, 14 January, 2025

Nominet Suffers Cyberattack via Ivanti Zero-Day Vulnerability

Nominet, the UK's official .uk domain registry, experienced a cyberattack exploiting a critical zero-day vulnerability (CVE-2025-0282) in Ivanti's VPN software. Detected in early January 2025, the breach allowed unauthenticated remote code execution. Nominet reports no evidence of data theft or unauthorized network access. Ivanti has released patches for Connect Secure, with fixes for other products expected by January 21.