Threat Intelligence

Apple's iCloud Private Relay Can Leak Your Real IP Address, Researchers Warn

The Hacker News · 6 Aug 2026

Key Takeaway Don't rely solely on built-in privacy tools like iCloud Private Relay for sensitive browsing—keep your devices updated and consider additional privacy safeguards for confidential business activity.

Cybersecurity researchers have identified a flaw in Apple's iCloud Private Relay, a privacy feature designed to hide users' real IP addresses while browsing with Safari. Introduced with iOS 15, the tool routes web traffic through two separate relays so that no single party, including Apple, can link a user's identity to their browsing activity.

However, researchers found that certain WebKit proxy bypasses can undermine this protection, allowing a user's genuine IP address to be exposed despite Private Relay being active. This means businesses and staff who rely on the feature for privacy while browsing may be less protected than they assume, particularly when using Safari on Apple devices for sensitive research or communications.

While Private Relay is primarily a consumer privacy feature, small businesses that handle sensitive client data or conduct competitive research online should be aware that built-in privacy tools are not infallible. Apple has not yet detailed a fix in the source information, so users should stay alert for updates addressing this issue.

Apple iCloud Private Relay Privacy WebKit IP Address Exposure

Summarised by CISO AI from The Hacker News. We link back to every original so you can read it yourself.