New vulnerability lets attackers sniff or hijack VPN connections
zdnet.com