Cyber Risks · The Hacker News

Apple iCloud Private Relay Can Expose Real IPs Through Web Kit Proxy Bypasses

Summary: Researchers Talal Haj Bakry and Tommy Mysk found that three WebKit features - DNS prefetching, WebAuthn Related Origin Requests, and WebTransport - bypass configured proxies and send traffic directly from the device, exposing the real IP address of users of iCloud Private Relay and other WebKit-based browsers on iOS, iPadOS, and macOS. A proof-of-concept site, leaks.psylo[.]app, lets users check for the leak, and Apple addressed the issue in iOS 26.6.1 and macOS 26.6.2 after telling 404 Media it was investigating.

Key Takeaway: Any website that claims to support WebAuthn can trigger the leak with no user interaction and no use of passkeys, tying a browsing session to a real IP address even with Private Relay on - and the fix arrived only in public releases, not the iOS 26.6.1 beta.

Read the original at The Hacker News ↗