Snapshot from Aug 25, 2026 at 07:00 UTC. For live data and tracking: View Live
Tech privacy vulnerability

Apple iCloud Private Relay IP leak

Analysis based on 30 articles · First reported Aug 05, 2026 · Last updated Aug 11, 2026

Sentiment
-20
Attention
4
Articles
30
Market Impact
General
Live prominence charts, article sentiment distribution, and event development timeline available on the Ergen Dashboard

The disclosure may raise privacy concerns among iCloud+ subscribers, potentially affecting Apple's reputation for privacy and its services revenue. However, the impact is likely limited as the flaw is technical and does not affect core device functionality, and Apple is expected to address it in a future update.

Technology Cybersecurity

Security researchers Tommy Mysk and Talal Haj Bakry disclosed that Apple's ICloud, a privacy feature for Safari, can leak users' real IP addresses. The flaw stems from WebKit features, particularly WebAuthn (passkeys), which bypass Safari's proxy and make direct network requests from the operating system, exposing the user's IP to websites that support or pretend to support passkeys. Additionally, Link prefetching (IOS 26) and WebTransport (IOS 26.4) can also reveal IP or DNS information. The issue affects all IOS browsers due to Apple's WebKit mandate, and also Onion Browser. Apple has acknowledged the report and is investigating, but no fix has been released. This is the second recent Apple privacy stumble, following the ICloud vulnerability. Users are advised to use a full-device VPN for complete protection.

100 Clarkson Law Firm filed lawsuit Apple Inc.
70 Tommy Mysk discovered vulnerabilities Apple Inc.
70 404 Media published security findings
60 Apple Inc. acknowledged and investigating
40 Tommy Mysk created proof-of-concept website
stock
Apple's privacy feature is found vulnerable, potentially undermining its privacy marketing and iCloud+ value proposition. Apple is investigating and may face reputational and regulatory scrutiny.
Importance 100.0 Sentiment -20.0
oth
The feature's core promise of IP masking is compromised, reducing its value and trust among users. Apple must fix the flaw to restore confidence.
Importance 100.0 Sentiment -40.0
priv
The browser engine is the root cause of the leaks, as its handling of WebAuthn, Link prefetching, and WebTransport bypasses Private Relay. This may prompt changes to WebKit's architecture.
Importance 90.0 Sentiment -30.0
per
Co-discoverer of the vulnerability, published findings and a test site, raising awareness and prompting Apple's investigation.
Importance 80.0 Sentiment 0.0
per
Co-discoverer of the vulnerability, contributed to the research and public disclosure.
Importance 80.0 Sentiment 0.0
oth
The passkey standard is implicated in the leak, as its implementation in Apple's OS bypasses Private Relay. This may affect adoption of passkeys if privacy concerns persist.
Importance 70.0 Sentiment -10.0
oth
A WebKit feature that can reveal users' DNS servers, contributing to the privacy leak.
Importance 40.0 Sentiment -10.0
oth
A WebKit feature that can establish direct connections, potentially exposing IP addresses.
Importance 40.0 Sentiment -10.0
priv
The Tor-based browser is also affected due to WebKit, highlighting the breadth of the issue.
Importance 30.0 Sentiment -10.0
priv
The outlet first reported the findings, amplifying the story and confirming the leak.
Importance 30.0 Sentiment 0.0
ngo
The The Tor Project's official browser is reportedly not affected, but the Onion Browser issue may indirectly affect Tor's reputation.
Importance 20.0 Sentiment 0.0
priv
Verified the issue independently, adding credibility to the reports.
Importance 20.0 Sentiment 0.0
ERGEN INTELLIGENCE
Track this event live

Set up alerts, explore entity relationships, search across thousands of events, and build custom intelligence feeds.

Open Dashboard

About Ergen

Ergen is a news intelligence platform that converts raw news articles into structured data. It tracks events, entities, and the relationships between them, with sentiment and attention metrics derived from thousands of articles. Pages on this site are daily static snapshots from the platform's live database. For real-time tracking, search, and alerts, the full dashboard is at app.ergen.ai.