APPLE'S PRIVATE RELAY LEAKS YOUR REAL IP ADDRESS IN SAFARI

Summary from the TLDR InfoSec newsletter

Mysk researchers found three unpatched leaks- DNS prefetching, WebAuthn's Related Origin Requests, and WebTransport- that let any website bypass Apple's Private Relay and reveal a user's real IP across all WebKit-based iOS browsers, and published the findings without prior disclosure to Apple, citing a pattern of yearlong fix delays.