News New vulnerability lets attackers sniff or hijack VPN connections