Apple Private Relay Exposes User IPs
NEOSEC enrichment — no mirror of the original source
Apple's Private Relay feature, which ostensibly hides an iCloud user's IP address while using a browser, fails to do so when visiting a website with certain configurations, according to researchers Tommy Mysk and Talal Haj Bakry. Private Re
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Editorial context in the original issue
The SANS NewsBites issue carries commentary by: Honan, Neely, Ullrich.
More on Private
Other advisories
- Not ratedosv:CVE-2026-113593Potential exposure of private data via empty and missing Vary headers
- HighCVE-2026-120627Private Internet Access Firefox extension: unzureichende Authentifizierung
- HighCVE-2026-120627Private Internet Access Firefox extension: unzureichende Authentifizierung
- Not ratedosv:CVE-2026-120426OpenCSG CSGHub through v2.6.0-ce Unauthenticated Private Repository File Read via Resolve Route
- Not ratedosv:CVE-2026-119533Gitea private pull request disclosure on project boards
- Not ratedosv:CVE-2026-118394Gitea OAuth2 userinfo private group disclosure to public-only tokens
- Not ratedosv:CVE-2026-117685Gitea public-only package token access to private OCI blobs
- Not ratedosv:CVE-2026-117649Gitea private issue disclosure through issue dependency timeline events
Other news entries
- Web3Auth infrastructure breach exposed private keys for some Keplr Google/Apple-login walletsBreachpwn.watch
- CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private KeyNewsThe Hacker News
- A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private ChatsNewsThe Hacker News
- Fake Anthropic AI previews lure in overeager employeesEventCSO Online
- Binance says a fake job interview started its $6.3B hack; it has rebuilt the affected wallet system and will cover all lossesBreachpwn.watch
- Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate AuthoritiesNewsCisco PSIRT
- How Rapid7 InsightGovCloud Supports BOD 22-01 ComplianceNewsRapid7
- Gheist turns GitHub Actions into a secret extraction serviceNewsCSO Online
ID