Security researchers revealed a flaw in Apple's iCloud Private Relay that exposes users' real IP addresses when websites support or pretend to support passkeys. The feature is designed to hide IP addresses from visited sites, but the passkey request bypasses the relay.\n\nA class action lawsuit accusing Apple of false advertising, misrepresentation, and fraud has been filed by Clarkson Law Firm, which previously secured a $250M settlement over delayed Siri AI. The suit claims Apple knew or should have known its representations were false.\n\nPartner Tim Giordano called it an "outrageous betrayal of consumer trust," stating users paid for protection that exposed them to tracking.

Apple has not yet responded to requests for comment.