Security researchers have discovered a problem with Apple’s iCloud Private Relay service. While the feature is meant to protect your real IP address, it might actually be leaking it to websites.
A new iCloud Private Relay problem
This iCloud Private Relay vulnerability was discovered by security researchers Tommy Mysk and Talal Haj Bakry, who detailed the problem in-depth on their website.
“In short: any website that supports, or pretends to support, passkeys can see the user’s real IP address despite having iCloud Private Relay on,” they say.
As a refresher, iCloud Private Relay is not a VPN. As we’ve explained before, it only protects your IP address in Safari, whereas VPNs protect all traffic from your device by running at the system level.
