team of researchers warns that VPNs are affected by a vulnerability that can be exploited to launch man-in-the-middle (MitM) attacks, enabling threat actors to intercept and redirect traffic
attack technique, named Port Shadow and tracked as CVE-2021-3773, builds on research first presented by Benjamin Mixon-Baca and Jedidiah R. Crandall back in 2021
https://www.breakpointingbad.com/2021/09/08/Port-Shadows-via-Network-Alchemy.html
paper detailing the research was published this week
(PDF URL)
Follow
and Citizen Lab, which often conducts research focusing on online privacy and security, has published a summary