Updating your app might not keep you safe: How outdated OpenVPN code leaves VPNs exposed
Trust your VPN software updates keep you safe? Believe that downloading the latest release protects you from most known threats?
You might be surprised to learn that there could be a set of invisible vulnerabilities lurking inside your state-of-the-art VPN. That's because more than half of Windows VPNs we analyzed include OpenVPN code that hasn’t been updated in over a year — potentially leaving you exposed to a wide range of security and performance threats.
OpenVPN is a protocol that determines how data is encrypted and routed between a user's device and a VPN server. Thanks to its open-source status, it became the industry's de facto standard, serving as the foundation for many commercial VPN services.
Because OpenVPN is developed as a separate open-source project, however, VPNproviders often update their apps while leaving the bundled OpenVPN component unchanged. New interfaces, bug fixes, and major features may arrive regularly, but...
Copyright of this story solely belongs to techradar.com. To see the full text click HERE
