b2b-daily
Home | IT | Cyber Security

Is Your Privacy at Risk Due to ExpressVPN’s DNS Leak?

Avatar photo
by Craig Anderson
February 14, 2024
Image Credit: Unsplash 
Is Your Privacy at Risk Due to ExpressVPN’s DNS Leak?

In a recent development, ExpressVPN issued an emergency patch to address a significant vulnerability in its Windows app. The issue pertained to the app’s split-tunneling feature which, when enabled, would allow certain DNS requests to be routed improperly. Attila Tomaschek, a VPN expert, sounded the alarm when he discovered that some DNS queries were inadvertently being sent to third-party servers, including potentially the user’s own Internet Service Provider (ISP), rather than through the encrypted channels of ExpressVPN’s servers.

While the encryption of data remained intact, the privacy of users was at stake. This flaw potentially exposed the browsing habits of approximately 1% of ExpressVPN’s customers—specifically those employing the split-tunneling feature to dictate which app traffic was protected by the VPN. In response, ExpressVPN promptly disabled the feature for those affected as they worked on a permanent fix.

Swift Response and Future Implications

Upon discovery of the DNS routing issue, ExpressVPN took immediate action. The company’s responsive approach underscores the importance of user privacy and the protection of all VPN traffic, a foundational aspect of any VPN service. ExpressVPN has begun an investigation into the matter and has reaffirmed their commitment to privacy and security. This incident did not affect all users; it was limited to those utilizing specific configurations of the split-tunneling functionality.

The vulnerability brings to light the critical nature of vigilance in the world of cybersecurity. Users of VPN services, such as ExpressVPN, rely heavily on the assurance that their activities online are shielded from unauthorized observation. This DNS leak serves as a pertinent reminder that while VPNs are crucial in the quest for digital privacy, they are not infallible. Ongoing scrutiny and swift action in addressing vulnerabilities are fundamental to maintaining trust and safety that users expect from their chosen VPN providers.

Information Security

Explore more

ERP Systems Shift From Bolt-On to AI-Native Architecture
July 23, 2026

The traditional enterprise resource planning market has recently crossed a significant threshold where the superficial application of artificial intelligence no longer suffices for complex industrial operations. By 2026, a distinct divide has emerged between legacy platforms that merely retrofitted AI features onto old code and those built from the ground up for the modern era. This evolution is changing how

How Will XRP and Ethereum Define the 2026 Crypto Market?
July 23, 2026

The transformation of the cryptocurrency market from a speculative frontier into a foundational pillar of the global financial system has fundamentally reshaped how institutions and retail investors perceive digital assets. Today, the landscape is defined by clear regulatory frameworks and significant participation from major banking institutions, moving away from the volatility of previous cycles toward a more professionalized environment. Within

Is Workplace Abuse Behind the Climate Official’s Death?
July 23, 2026

The sudden passing of a senior director within the international climate policy framework has sent shockwaves through the scientific community and raised urgent questions about the psychological toll of high-pressure public service roles. While initial reports focused on health complications resulting from chronic stress, subsequent leaks of internal emails and whistleblower testimonies suggested a disturbing reality of systematic bullying and

Is the Future of the Linux Desktop Atomic?
July 23, 2026

The Linux desktop has undergone a radical transformation as the community moves away from the fragile, manual configuration methods of the past toward a much more resilient, image-based future. For several decades, the quintessential Linux experience was defined by a fundamental paradox where users enjoyed unparalleled control over their environment while simultaneously facing a constant risk of catastrophic system failure

Proactive Layered Strategies Neutralize Ransomware Threats
July 23, 2026

The persistent threat of digital extortion has transformed from a rare occurrence into an unavoidable reality that demands a fundamental shift in how individuals approach their computer’s security landscape. Relying solely on the hope that a system will remain unnoticed by malicious actors is no longer a viable strategy in an environment where automated exploitation tools are constantly scanning for