{
  "id": 189868,
  "title": "Apple's iCloud Private Relay is Leaking Users' Real IP Addresses",
  "url": "https://urgent.news/2026/08/05/apples-icloud-private-relay-is-leaking-users-real-ip-addresses",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-08-05T19:41:47.000Z",
  "source": {
    "name": "MacRumors",
    "slug": "macrumors",
    "url": "https://www.macrumors.com/2026/08/05/icloud-private-relay-ip-address-leak/"
  },
  "original_language": "en",
  "account": "Security researchers Tommy Mysk and Talal Haj Bakry have discovered a flaw in Apple's iCloud Private Relay, a paid feature designed to protect users' IP addresses while browsing Safari. Despite its claims to mask the IP and DNS information, the service fails to secure the request sent to websites using passkeys, which employ the WebAuthn standard. This flaw allows the real IP address to be exposed to websites even when Private Relay is active, as the request bypasses the feature and reaches its destination server directly. The issue occurs because the request is issued by the operating system's credential service, not by Safari, and thus never enters Private Relay's proxied path. In addition, two other WebKit features, DNS prefetching and WebTransport, can also lead to IP and DNS data leakage. Apple has acknowledged the report and is investigating the matter. However, as the flaw is inherent to WebKit, it may affect other third-party browsers as well. To mitigate the risk, users can consider using a VPN for additional protection.",
  "summary": "Apple's paid Safari protection feature that promises to keep your IP masked doesn't always work, according to security researchers Tommy Mysk and Talal Haj Bakry . It turns out iCloud Private Relay can expose your real IP to websites that use or pretend to use passkeys. ‌iCloud‌ Private Relay is a service included with paid ‌iCloud‌+ plans. It is supposed to hide your IP and…",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 6,
    "also_reported_by": [
      {
        "outlet": "404 Media",
        "title": "Apple's ‘Private Relay’ Is Exposing Users’ Real IP Addresses",
        "url": "https://urgent.news/2026/08/05/apples-private-relay-is-exposing-users-real-ip-addresses",
        "published": "2026-08-05T13:46:30.000Z"
      },
      {
        "outlet": "Slashdot",
        "title": "Apple's 'Private Relay' Is Exposing Users' Real IP Addresses",
        "url": "https://urgent.news/2026/08/05/apples-private-relay-is-exposing-users-real-ip-addresses-189095",
        "published": "2026-08-05T20:00:00.000Z"
      },
      {
        "outlet": "TechSpot",
        "title": "Apple's iCloud Private Relay feature is leaking users' real IP addresses",
        "url": "https://urgent.news/2026/08/06/apples-icloud-private-relay-feature-is-leaking-users-real-ip-addresses",
        "published": "2026-08-06T10:15:00.000Z"
      },
      {
        "outlet": "TechRadar",
        "title": "Apple's Private Relay tool can leak users' IP addresses — with OnionBrowser also affected",
        "url": "https://urgent.news/2026/08/06/apples-private-relay-tool-can-leak-users-ip-addresses-with",
        "published": "2026-08-06T10:35:00.000Z"
      },
      {
        "outlet": "The Hacker News",
        "title": "Apple iCloud Private Relay Can Expose Real IPs Through WebKit Proxy Bypasses",
        "url": "https://urgent.news/2026/08/06/apple-icloud-private-relay-can-expose-real-ips-through-webkit-proxy",
        "published": "2026-08-06T11:33:08.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}