1y ago

ExpressVPN bug has been leaking some DNS requests for years

www.bleepingcomputer.com ExpressVPN bug has been leaking some DNS requests for years

ExpressVPN has removed the split tunneling feature from the latest version of its software after finding that a bug exposed the domains users were visiting to configured DNS servers.

However, this bug caused some DNS queries to be sent to the DNS server configured on the computer, usually a server at the user's ISP, allowing the server to track a user's browsing habits.

cybersecurity @infosec.pub

IllNess @infosec.pub

1y ago

ExpressVPN bug has been leaking some DNS requests for years

www.bleepingcomputer.com /news/security/expressvpn-bug-has-been-leaking-some-dns-requests-for-years/

10 1

Security News @infosec.pub

IllNess @infosec.pub

1y ago

ExpressVPN bug has been leaking some DNS requests for years

www.bleepingcomputer.com /news/security/expressvpn-bug-has-been-leaking-some-dns-requests-for-years/

22 1

Technology @lemmy.world

Squire1039 @lemm.ee

1y ago

ExpressVPN bug leaks DNS requests for Windows users with split tunneling:

www.bleepingcomputer.com /news/security/expressvpn-bug-has-been-leaking-some-dns-requests-for-years/

239 10

2 comments

AdTech company buys out ExpressVPN for nearly a billion dollars in 2021, product proceeds to start leaking data in 2022. I'm not saying that bit malicious, but talk about being sloppy with your purchase.

The bug was introduced in ExpressVPN Windows versions 12.23.1 – 12.72.0, published between May 19, 2022, and Feb. 7, 2024, and only affected those using the split tunneling feature.