EXPRESSVPN USER DATA EXPOSED DUE TO BUG

Summary from the TLDR InfoSec newsletter

ExpressVPN disabled split tunneling on Windows clients to fix a bug introduced in May 2022 which caused DNS requests to bypass its servers. This bug exposed domain visits to ISPs when using split tunneling with app-specific VPN routing. Though traffic stayed encrypted, the DNS leak defeated privacy protections.