WEBKIT FLAW LEAKS IP AND DNS DATA THROUGH PROXIES

Security researchers discovered that WebKit, the engine powering Safari and other browsers, fails to route certain traffic through configured proxies and privacy tools. The flaw enables websites to obtain users' actual IP addresses and DNS queries despite active privacy protections. The vulnerability affects proxy browsers and iCloud Private Relay, Apple's service designed to mask user identity and browsing activity. Attackers can exploit the leak through specific WebKit behaviors that bypass established privacy protocols. Affected users include Safari users, iCloud+ subscribers using Private Relay, and anyone relying on proxy-based privacy tools on WebKit-based browsers. The flaw exposes fundamental browsing data that these services specifically aim to protect. Apple has not yet released a patch. Users concerned about IP and DNS leaks should consider alternative browsers or VPN services until an update becomes available. The discovery highlights recurring challenges in browser security architecture.