Security researchers at Graz University of Technology have discovered that standard file-change notification systems in Linux, Windows, Android, and macOS can be weaponized by unprivileged local processes to monitor user behavior. Without requiring administrative access, bad actors can observe file names and event timing to reconstruct sensitive activities, such as keystroke rhythms (with over 93% accuracy), website browsing histories, and media exchanges on apps like WhatsApp. While the attacks...