'Decades-old' bugs found affecting Windows, Android, macOS and Linux — but the OS makers don't see…
- Graz University researchers found decades‑old flaws in file‑notification subsystems across Linux, Windows, macOS, and Android
- Side‑channel attacks can infer keystrokes, visited websites, or even steal credentials via unprivileged access
- Linux shipped partial mitigations (CVE‑2025‑68788); Microsoft and Apple acknowledged but did not patch, demo expected at ACM CCS 2026
Researchers have found a vulnerability in all major operating systems which could, in certain scenarios, allow threat actors to steal login credentials, or track which websites the target is visiting. OS makers, on the other hand, don’t seem all too phased about it.
The bug is described as a side-channel attack - a type of attack in which threat actors simply observe how the system operates and extract valuable secrets through indirect clues. For example, by monitoring how much power the chip takes at any given moment in time, attackers can observe and extract passwords.
It was discovered by security researchers...
Copyright of this story solely belongs to www.techradar.com. To see the full text click HERE
