New Study Warns Several Free iOS and Android VPN Apps Leak Data

Zimperium zLabs analyzed nearly 800 free Android and iOS VPN apps and found widespread security and privacy problems — including a few apps using an outdated OpenSSL vulnerable to Heartbleed (CVE-2014-0160), about 1% susceptible to MitM, excessive and invasive permissions (location, READ_LOGS, microphone, screen capture), missing privacy manifests on ~25% of iOS apps, and private entitlements in >6% — creating significant risk of data exposure and surveillance, especially for BYOD environments.