Billions of session cookies for sale sparks security warning

Security advice from NordVPN?

The VPN provider that had their private keys shared on 4chan numerous times but failed to update them until months later despite knowing this?