Hackers are actively trying to steal passwords from two widely used VPNs https://arstechnica.com/?post_type=post&p=1557239