The iCloud Private Relay service is a dual-hop architecture designed to make a user’s online footprint more anonymous through the use of two rotating proxies, and it blocks potential attackers from identifying users’ IP address, location data, and DNS requests from websites and network service providers. The service was marketed to replace the need of a third-party VPN and is only available for iCloud+ subscribers running iOS 15 or macOS 12 Monterey and above. After Apple’s iCloud Private Relay service was officially released last week, researchers discovered a critical vulnerability that could allow attackers to identify users’ true IP addresses. The static IP can be found using Web Real-Time Communication (WebRTC), which provides browser applications with real-time communication through specific APIs that allow audio and video communication between users without the need for plugins or extensions. Apple was quick to patch the vulnerability for iOS 14, however the flaw persists on iOS 15. The Ankura CTAPT will continue to monitor this matter and will release an update when the patch for iOS 15 is released.