EXPRESSVPN BUG LEAKED USER IPS IN REMOTE DESKTOP SESSIONS

Summary from the TLDR InfoSec newsletter

A security researcher reported a vulnerability in ExpressVPN's Windows client that caused Remote Desktop Protocol (RDP) traffic to bypass the VPN, which could lead to exposing the user's IP. ExpressVPN patched the bug, confirmed that it only impacted RDP traffic, and stated that it was introduced by debug code that was accidentally included in production builds.