Virtual private networks (VPNs), which have seen a rise in use as more people work from home, are vulnerable to an attack that removes the anonymity they grant users, researchers have found