Major operating systems have flaws that let hackers track user activity

Researchers from Graz University of Technology have identified long-standing vulnerabilities within the file notification subsystems of several major operating systems. These flaws affect Windows, Linux, Android, and macOS, impacting core components such as Windows' ReadDirectoryChangesW, Linux's inotify, Android's FileObserver, and macOS's FSEvents. The discovered bugs stem from how these systems report file changes, such as when a document is opened, modified, or removed. While the vulnerabilities do not expose the actual contents of files, they allow malicious actors to monitor system activity through side-channel leaks.

These security gaps enable attackers to infer sensitive user behaviors, including tracking web browsing history, monitoring WhatsApp media interactions, and even capturing keystroke timing to steal user input. For the business community, this discovery necessitates a thorough review of existing software environments. Organizations may need to implement software updates, establish more secure data transfer protocols, or adopt alternative connection methods to mitigate the risk of unauthorized activity monitoring.