WebKit Flaw Triggers iCloud Private Relay IP Leak

Apple WebKit behavior lets WebAuthn/passkey operations and related features bypass Safari and iCloud Private Relay, exposing real IP addresses and DNS information to target servers; DNS prefetching and WebTransport also leak network identifiers. The issue affects all iOS browsers using WebKit, researchers provided analysis, Apple is investigating, and users are advised to use a system‑wide VPN until fixes are available.