Back to today’s briefing

Story perspectives

iCloud Private Relay Flaws Expose IP via WebKit

8/17/2026

48 10 Full Breakdown

Summary

Story summary

iCloud Private Relay can leak a user’s IP address or DNS data through three WebKit methods.
Researchers Talal Haj Bakry and Tommy Mysk identified DNS prefetching and WebTransport connections as leak paths that bypass the proxy and expose the IP.
The DNS prefetching flaw, present since iOS 26.0 and expanded with WebTransport in iOS 26.4, prompts users to keep Private Relay on, update to iOS 26.6+, and note VPNs are unaffected.

1 of 1

Story summary

iCloud Private Relay can leak a user’s IP address or DNS data through three WebKit methods.
Researchers Talal Haj Bakry and Tommy Mysk identified DNS prefetching and WebTransport connections as leak paths that bypass the proxy and expose the IP.
The DNS prefetching flaw, present since iOS 26.0 and expanded with WebTransport in iOS 26.4, prompts users to keep Private Relay on, update to iOS 26.6+, and note VPNs are unaffected.