Get the latest tech news
Ivanti VPN zero-day implicated in Nominet hack
Investigation into the incident is still underway but Nominet, which is among the major country code registries, was reported by ISPreview to not have determined any proof of backdoor injections.
Investigation into the incident is still underway but Nominet, which is among the major country code registries, was reported by ISPreview to not have determined any proof of backdoor injections. Additional details regarding the vulnerability were not provided by Nominet but active exploitation of the Connect Secure zero-day, tracked as CVE-2025-0282, has been confirmed by Ivanti last week. Initial intrusions targeting Ivanti Connect Secure appliances impacted by CVE-2025-0282 facilitated the Spawn malware toolkit associated with the China-nexus cyberespionage operation UNC5337 before proceeding with the deployment of the newly emergent Phasejam and Dryhook payloads, according to Mandiant researchers.
Or read this on r/technology