b2b-daily
Home | IT | Cyber Security

Is Your Privacy at Risk Due to ExpressVPN’s DNS Leak?

Avatar photo
by Craig Anderson
February 14, 2024
Image Credit: Unsplash 
Is Your Privacy at Risk Due to ExpressVPN’s DNS Leak?

In a recent development, ExpressVPN issued an emergency patch to address a significant vulnerability in its Windows app. The issue pertained to the app’s split-tunneling feature which, when enabled, would allow certain DNS requests to be routed improperly. Attila Tomaschek, a VPN expert, sounded the alarm when he discovered that some DNS queries were inadvertently being sent to third-party servers, including potentially the user’s own Internet Service Provider (ISP), rather than through the encrypted channels of ExpressVPN’s servers.

While the encryption of data remained intact, the privacy of users was at stake. This flaw potentially exposed the browsing habits of approximately 1% of ExpressVPN’s customers—specifically those employing the split-tunneling feature to dictate which app traffic was protected by the VPN. In response, ExpressVPN promptly disabled the feature for those affected as they worked on a permanent fix.

Swift Response and Future Implications

Upon discovery of the DNS routing issue, ExpressVPN took immediate action. The company’s responsive approach underscores the importance of user privacy and the protection of all VPN traffic, a foundational aspect of any VPN service. ExpressVPN has begun an investigation into the matter and has reaffirmed their commitment to privacy and security. This incident did not affect all users; it was limited to those utilizing specific configurations of the split-tunneling functionality.

The vulnerability brings to light the critical nature of vigilance in the world of cybersecurity. Users of VPN services, such as ExpressVPN, rely heavily on the assurance that their activities online are shielded from unauthorized observation. This DNS leak serves as a pertinent reminder that while VPNs are crucial in the quest for digital privacy, they are not infallible. Ongoing scrutiny and swift action in addressing vulnerabilities are fundamental to maintaining trust and safety that users expect from their chosen VPN providers.

Information Security

Explore more

How Can HR Resist Senior Pressure to Hire the Unqualified?
May 1, 2026

The request usually arrives with a deceptive sense of urgency and the heavy weight of authority when a senior executive suggests a “perfect candidate” who happens to lack every required credential for the role. In these high-pressure moments, Human Resources professionals find themselves caught in a professional vice, squeezed between their duty to uphold organizational integrity and the direct orders

Why Strategy Beats Standardized Healthcare Marketing
May 1, 2026

When a private surgical center invests six figures into a digital presence only to find their schedule remains half-empty, the culprit is rarely a lack of technical effort but rather a total absence of strategic differentiation. This phenomenon illustrates the most expensive mistake a medical practice can make: assuming that a high-performing campaign for one clinic will yield identical results

Why In-Person Events Are the Ultimate B2B Marketing Tool
May 1, 2026

A mountain of leads generated by a sophisticated digital campaign might look impressive on a spreadsheet, yet it often fails to persuade a skeptical executive to authorize a complex contract requiring deep institutional trust. Digital marketing can generate high volume, but the most influential transactions are moving away from the screen and back into the physical room. In an era

Hybrid Models Redefine the Future of Wealth Management
May 1, 2026

The long-standing friction between automated algorithms and human expertise is finally dissolving into a sophisticated partnership that prioritizes client outcomes over technological purity. For over a decade, the financial sector remained fixated on a zero-sum game, debating whether the rise of the robo-advisor would eventually render the human professional obsolete. Recent market shifts suggest this was the wrong question to

Is Tune Talk Shop the Future of Mobile E-Commerce?
May 1, 2026

The traditional mobile application once served as a cold, digital ledger where users spent mere seconds checking data balances or paying monthly bills before quickly exiting. Today, a seismic shift in consumer behavior is redefining that experience, as Tune Talk users now spend an average of 36 minutes daily engaged within a single ecosystem. This level of immersion suggests that