VPN bypass vulnerability affects Android Jelly Bean and KitKat, researchers say | PCWorld | ICT Security-Sécurité PC et Internet | Scoop.it
The vulnerability could allow attackers to intercept traffic from Android devices despite an active VPN connection


A vulnerability in Android allows malicious applications to bypass an active VPN (virtual private network) connection and force traffic from the device through an attacker-controlled system where it can be intercepted, according to security researchers from Ben-Gurion University of the Negev in Israel.