The vulnerability of ExpressVPN’s split-tunneling function allows a hacker to obtain confidential information about websites visited by VPN users.

The vulnerability of ExpressVPN’s split-tunneling service lies in the lack of protection for service-related data. Exploiting this vulnerability allows a malicious actor to obtain confidential information about websites visited by VPN users remotely...