Good Idea: Be sure to connect to networks you trust when using VPN...

https://arstechnica.com/security/2024/05/novel-attack-against-virtually-all-vpn-apps-neuters-their-entire-purpose/

This "novel" attack is exploiting a vulnerability that has existed for 22 years. The attack, called TunnelVision, tricks VPNs into sending your internet traffic through an unencrypted path, even though you think it's protected. Here's how it works:

1. When you connect to a network, your device asks for an IP address using something called DHCP.

2. The attacker sets up a fake DHCP server on the same network you're on.

3. This fake server tells your device to send its VPN traffic through it instead of the normal, encrypted path.

4. Your device then sends all its internet traffic—including the stuff you thought was secure—through the attacker's server.

5. The attacker can now see, modify, or even block your traffic, defeating the purpose of using a VPN to protect your privacy.

This exploit makes VPNs ineffective in hiding your online activities, so it's important to be cautious when connecting to networks, especially ones you don't trust.