ICloud Private Relay Bypassed via WebKit Passkey and WebTransport

Researchers found two WebKit vectors that bypass iCloud Private Relay, exposing real IP addresses. Passkey authentication and WebTransport connections both operate outside Safari's proxy path. 404 Media independently verified the findings. Apple says it is investigating.