[CLSTR]
< Back to all clusters
[TECHNOLOGY] · United States · 24 sources

started · updated

Part of situation: Apple faces legal action over iCloud Private Relay IP leaks (4 clusters)

Apple iCloud Private Relay leaks real IP addresses via WebKit flaws

iCloud Private Relay WebKit IP leak passkeys Apple

Security researchers Talal Haj Bakry and Tommy Mysk reported three vulnerabilities in Apple’s WebKit engine—DNS prefetching, WebAuthn (passkey) requests, and WebTransport—that bypass the iCloud Private Relay proxy. These flaws allow websites to see a user’s actual IP address and DNS queries even when Private Relay is enabled.

The issue affects Safari and all third‑party browsers on iOS, iPadOS and macOS because Apple requires them to use WebKit. Privacy‑focused browsers such as Onion Browser, Tor‑based browsers, and the researchers’ own Psylo browser are also impacted. Apple has been notified and says it is investigating, with a fix expected in the fall of 2026. A public test site (leaks.psylo.app) lets users verify whether their IP is being exposed.

Apple notes that Private Relay is not a full‑device VPN; it only masks traffic within Safari. Consequently, passkey‑based authentication requests handled by the operating system’s credential service bypass the proxy, exposing the real IP address to the destination server.

Entities

Apple Inc. · Onion Browser · Psylo · Talal Haj Bakry · Tommy Mysk · WebKit · iCloud Private Relay · iPhone

Claims

What the coverage asserts, and how many sources carry each claim.

Sources

WebKit Bug Lets Websites Bypass ICloud Private Relay, Leak IP [bitnewsbot.com]
15 days ago
Apple iCloud Private Relay Non è così privata come sembra, può rivelare l'indirizzo IP - Ilcorrierino. com [www.ilcorrierino.com]
16 days ago
Apple's ‘Private Relay’ Is Exposing Users’ Real IP Addresses — why it's trending | Archynetys [www.archynetys.com]
16 days ago
Apple's 'Private Relay' Is Exposing Users' Real IP Addresses - Slashdot [yro.slashdot.org]
16 days ago
iCloud Private Relay expone tu IP real: fallo en WebKit confirmado [www.soydemac.com]
15 days ago
Apple Private Relay ujawnia adresy IP użytkowników – problem dotyczy też OnionBrowser – OSnews. pl [osnews.pl]
15 days ago
El 'Relay Privado' de Apple está exponiendo la IP real de los usuarios al navegar con sus dispositivos [www.diarioestrategia.cl]
15 days ago
Apple Private Relay puede filtrar tu IP real: el fallo en WebKit que investiga Apple [www.moncloa.com]
16 days ago
iCloud Private Relay potrebbe far individuare l’indirizzo IP reale degli utenti - macitynet. it [www.macitynet.it]
16 days ago
iCloud Private Relay espone l’IP reale: falla Apple [spider-mac.com]
16 days ago
Researchers Say iCloud Private Relay and iOS Privacy Browsers Are Leaking Your IP Address | iPhone in Canada [www.iphoneincanada.ca]
16 days ago
PSA: Apple’s Private Relay can leak your real IP address [techcrunch.com]
16 days ago
IP and DNS leaks in WebKit are affecting proxy browsers and iCloud Private Replay - MacTech. com [www.mactech.com]
16 days ago
WebKit : trois fonctions peuvent contourner un proxy [www.iphonote.com]
17 days ago
Una grieta en iCloud Private Relay expone la IP real de los usuarios de Safari [www.actualidadiphone.com]
15 days ago
Apple’s iCloud Private Relay can leak your real IP address through passkey logins, researchers warn [macdailynews.com]
15 days ago
Apple’s iCloud Private Relay Doesn’t Hide Your IP Address Very Well [www.glitched.online]
16 days ago
Le pseudo-VPN d’Apple dévoile les vraies adresses IP des internautes [www.frandroid.com]
16 days ago
Erwischt! Apples iCloud Private Relay verpetzt IP-Nummern – iTopnews. de [www.itopnews.de]
16 days ago
Apple iCloud Private Relay WebKit Flaws Leak Users’ Real IP Addresses [cybersecuritynews.com]
16 days ago
WebKit fait fuiter des données d'utilisateurs d'iPhone - iPhoneAddict. fr [iphoneaddict.fr]
17 days ago
Apple iCloud Private Relay Can Expose Real IPs Through WebKit Proxy Bypasses [thehackernews.com]
15 days ago
WebKit privacy leak leaves iPhone and Mac users exposed [www.cultofmac.com]
16 days ago
Apple’s iCloud Private Relay isn’t as private as you think [www.digitaltrends.com]
16 days ago