
"Years-long ExpressVPN Bug Exposed DNS Requests"
ExpressVPN has removed the split tunneling feature from its latest software version after discovering a bug that exposed users' visited domains to configured DNS servers. The bug, affecting Windows versions 12.23.1 – 12.72.0, allowed some DNS requests to be sent to the user's ISP instead of ExpressVPN's server, potentially exposing browsing history. Users are advised to upgrade to version 12.73.0 or disable split tunneling to prevent DNS request leaks, with the company planning to re-introduce the feature in a future release once the bug is fixed.

