b2b-daily
Home | IT | Cyber Security

Is Your Privacy at Risk Due to ExpressVPN’s DNS Leak?

Avatar photo
by Craig Anderson
February 14, 2024
Image Credit: Unsplash 
Is Your Privacy at Risk Due to ExpressVPN’s DNS Leak?

In a recent development, ExpressVPN issued an emergency patch to address a significant vulnerability in its Windows app. The issue pertained to the app’s split-tunneling feature which, when enabled, would allow certain DNS requests to be routed improperly. Attila Tomaschek, a VPN expert, sounded the alarm when he discovered that some DNS queries were inadvertently being sent to third-party servers, including potentially the user’s own Internet Service Provider (ISP), rather than through the encrypted channels of ExpressVPN’s servers.

While the encryption of data remained intact, the privacy of users was at stake. This flaw potentially exposed the browsing habits of approximately 1% of ExpressVPN’s customers—specifically those employing the split-tunneling feature to dictate which app traffic was protected by the VPN. In response, ExpressVPN promptly disabled the feature for those affected as they worked on a permanent fix.

Swift Response and Future Implications

Upon discovery of the DNS routing issue, ExpressVPN took immediate action. The company’s responsive approach underscores the importance of user privacy and the protection of all VPN traffic, a foundational aspect of any VPN service. ExpressVPN has begun an investigation into the matter and has reaffirmed their commitment to privacy and security. This incident did not affect all users; it was limited to those utilizing specific configurations of the split-tunneling functionality.

The vulnerability brings to light the critical nature of vigilance in the world of cybersecurity. Users of VPN services, such as ExpressVPN, rely heavily on the assurance that their activities online are shielded from unauthorized observation. This DNS leak serves as a pertinent reminder that while VPNs are crucial in the quest for digital privacy, they are not infallible. Ongoing scrutiny and swift action in addressing vulnerabilities are fundamental to maintaining trust and safety that users expect from their chosen VPN providers.

Information Security

Explore more

Hollow-Core Fiber Revolutionizes AI Data Center Networking
March 3, 2026

The Dawn of a New Connectivity Standard for the AI Era The velocity at which data traverses the globe has finally hit a physical ceiling, forcing a fundamental reconsideration of the materials that have powered the internet for over half a century. In the current landscape, the rise of Artificial Intelligence is the dominant force reshaping digital infrastructure. As large

How Will Data Centers Manage the AI Energy Crisis?
March 3, 2026

The sheer velocity of the artificial intelligence revolution has transformed the global energy landscape from a predictable utility market into a volatile frontier where silicon and electricity collide with unprecedented force. For decades, the data center existed as a quiet background utility, a necessary but largely invisible support system for corporate emails and static web pages. However, the rise of

Is Aeternum C2 the End of Traditional Botnet Takedowns?
March 3, 2026

The landscape of global cybercrime has undergone a radical transformation as malicious actors transition from vulnerable, centralized server architectures to the immutable and distributed nature of modern blockchain ecosystems. For decades, the standard protocol for law enforcement agencies involved a coordinated “whack-a-mole” strategy where command-and-control servers were seized, or malicious domains were blacklisted to sever the connection between attackers and

How Does the New Dohdoor Malware Evade Detection?
March 3, 2026

The rapid evolution of cyber espionage has introduced a formidable new adversary that specifically preys upon the structural vulnerabilities of American healthcare and educational institutions. This recently identified threat actor, designated by security researchers as UAT-10027, has been orchestrating a sophisticated multi-stage intrusion campaign since the closing months of 2025. At the heart of this activity is a previously undocumented

Go Supply Chain Attacks – Review
March 3, 2026

The modern software supply chain operates on a delicate architecture of inherited trust where a single hijacked dependency can bypass the most rigorous perimeter defenses in seconds. Within this framework, the Go programming language has emerged as a cornerstone for cloud-native engineering, offering unparalleled efficiency for microservices and DevOps automation. Its dependency management relies on the go.mod and go.sum files,