The Freename Forum

The .uk administrator Nominet assumes that it has fallen victim to cyber criminals. In an email to customers it says: “We became aware of suspicious activity on our network late last week. The entry point was through third-party VPN software supplied by Ivanti that enables our people to access systems remotely.” And further: “The unauthorized intrusion into our network exploited a zero-day vulnerability”. At this stage, however, there is no evidence that any data has been stolen or disclosed, nor have any backdoors or other forms of unauthorized access to the network been identified. The system for registering .uk domains is working smoothly as usual. Nominet manages around eleven million .uk domains, as well as geoTLDs such as .cymru and .wales. Nominet has also made a name for itself as an Emergency Backend Registry Operator (EBERO) for the Internet registry ICANN in order to stabilize generic top level domains that have got into difficulties, including .nowruz, .desi and .wed. The security incident that has now been reported could have an impact on future ICANN contracts.

Source: https://www.theregister.com/2025/01/13/ ... _zero_day/