iCloud Private Relay leaks can expose your real IP

If you pay for iCloud+ and use Safari, you may have turned on iCloud Private Relay for an extra layer of privacy. Apple designed the feature to prevent websites from seeing your actual IP address and exact location.

Now, security researchers have found three ways that certain WebKit features can slip outside that protection.

Researchers Talal Haj Bakry and Tommy Mysk discovered that DNS prefetching, a WebAuthn feature connected to passkeys and WebTransport can bypass WebKit's proxy configuration.