Windows, Linux and Android File-Tracking Mechanisms Allow Covert Monitoring of User Activity — 25 September 2026

Researchers at Graz University of Technology showed that built-in file-change notification systems in Linux, Android, Windows and macOS can be abused to monitor other users on the same system. The attacks do not expose file contents, but file names and event timing can reveal activity such as typing rhythms, visited websites, and when files are sent, received or deleted.