In the quiet architecture of digital trust, Apple's Private Relay — a premium promise of anonymity sold to millions of iCloud+ subscribers — has been found to unravel at precisely the moment users reach for a newer, more secure way to log in. Researchers discovered in early August that three vulnerabilities in WebKit, the engine underlying every iOS browser, can expose the real IP addresses of users who believed themselves protected, with passkey authentication serving as the unwitting key that unlocks the leak. The flaw is not merely technical; it is a parable about the limits of privacy as a
The Star
· Aug 10, 2026
· technology
· 5 min de lectura
High
Verificación: Verificado
Apple's Private Relay privacy feature has critical flaw exposing user IP addresses
◉
Technology
11053 artículos relacionados
Google Launches Gemini Enterprise for Legal Services
Google News · 100% coincidencia
Japan moves to break Apple and Google's app store payment monopoly
Livemint · 99% coincidencia
Google Brings Gemini AI to Android Go Devices, Replacing Assistant Go
TechTrendsKE · 99% coincidencia
Google rolls out Gemini 2.0 Flash Experimental to Android and iOS user…
PhoneArena · 99% coincidencia
Broadcom Stock Plunges on Weak Software Sales and Flat AI Chip Guidanc…
Google News · 99% coincidencia
Cobertura Relacionada
The New York Times · Sep 24
Australia Probes OpenAI Over Unauthorized Access to Health Care Data
Australia is exploring legal action after an AI agent accessed nonpublic information on its universal health care system…
Al Jazeera · Sep 24 OpenAI CEO calls for international AI coordination amid healthcare data breachOpenAI CEO Sam Altman advocates for international coordination on AI risks, as Australia reports OpenAI's AI agents brea…
The New York Times · Sep 24 U.S. and China Diverge on AI Safety Despite Shared RhetoricThe US and China use similar AI safety rhetoric but pursue fundamentally different protective goals, reflecting their di…
Deutsche Welle · Sep 24 OpenAI Agent Breached Australian Health Portal in First Known AI Hack of Government SystemAn OpenAI autonomous agent infiltrated Australia's Medicare statistics portal in June, accessing public and non-public f…
Sesgo y Encuadre
⚖
Article reports on discovered WebKit flaws exposing user IPs despite Apple's Private Relay, using factual language with minimal editorializing but emphasizing the irony of security features creating vulnerabilities.
Bias Direction
center
Confidence
HIGH
Problem-focused reporting with emphasis on irony and contradiction (security feature creating vulnerability). Uses researcher credibility and Apple's own policy requirements to establish legitimacy of concerns without sensationalism.
critical flaw
inadvertently sharing
ironic twist
expose a device's actual IP address
Apple's official response or statement on the vulnerability
Timeline for fixes or patches
Quantification of affected users
Industry expert commentary on severity relative to other privacy risks
Apple's rationale for WebKit requirement and its security tradeoffs
Impacto Geopolítico
🌎
Apple's WebKit browser engine contains critical flaws exposing user IP addresses despite Private Relay privacy protections, affecting all iOS browsers and undermining privacy commitments.
Escalation Risk
moderate
Confidence
HIGH
Global
United States
European Union
United Kingdom
Asia-Pacific
This vulnerability weakens Apple's market positioning as a privacy-focused tech leader, potentially benefiting competitors emphasizing stronger privacy protections. It may embolden regulatory scrutiny from EU (GDPR), UK, and US authorities already investigating Big Tech privacy practices. China and authoritarian regimes gain intelligence collection advantages through IP exposure.
Similar to the 2013 PRISM revelations exposing tech company surveillance vulnerabilities, undermining public trust in corporate privacy claims and triggering regulatory backlash.
Lente Económico
📈
Critical WebKit vulnerabilities in Apple's ecosystem leak user IP addresses despite Private Relay privacy protections, undermining iCloud+ premium service value and raising cybersecurity liability concerns.
Market Signal
bearish
Confidence
HIGH
Cybersecurity and data protection services
Cloud computing and subscription services
Consumer electronics and software
Digital privacy and VPN services
Legal and liability insurance
iCloud+ subscribers paying for Private Relay privacy protection face compromised service quality and potential identity exposure. Consumer trust in Apple's privacy claims diminishes, potentially reducing premium subscription adoption and increasing churn among existing subscribers concerned about actual privacy protection.
Regulators (FTC, EU DPA, UK ICO) may investigate false advertising claims regarding privacy features. Potential enforcement actions, fines, or mandatory security audits could follow. Privacy legislation compliance reviews may intensify. Apple may face class-action litigation from affected iCloud+ subscribers seeking refunds or damages.