In October 2025, mobile security firm Zimperium reported that three of roughly 800 free VPN apps tested still bundled a version of OpenSSL vulnerable to Heartbleed, a bug patched in 2014.
In October 2025, mobile security firm Zimperium reported that three of roughly 800 free VPN apps tested still bundled a version of OpenSSL vulnerable to Heartbleed, a bug patched in 2014.