Technology

• Graz University researchers found decades‑old flaws in file‑notification subsystems across Linux, Windows, macOS, and Android
• Side‑channel attacks can infer keystrokes, visited websites, or even steal credentials via unprivileged access
• Linux shipped partial mitigations (CVE‑2025‑68788); Microsoft and Apple acknowledged but did not patch, demo expected at ACM CCS 2026

Researchers have found a vulnerability in all major operating systems which could, in certain scenarios, allow threat actors to steal login credentials, or track which websites the target is visiting. OS makers, on the other hand, don’t seem all too phased about it.

The bug is described as a side-channel attack - a type of attack in which threat actors simply observe how the system operates and extract valuable secrets through indirect clues. For example, by monitoring how much power the chip takes at any given moment in time, attackers can observe and extract passwords.

It was discovered by security researchers from Austria’s Graz University of Technology: Sudheendra Raghav Neela, Xufan Zhao, Jeanette Angelika Wultsch, Hannes Weissteiner, Florian Draschbacher, Stefan Gast, and Daniel Gruss.

Notifying the system

This particular side-channel vulnerability was found in the file-notification subsystem running in pretty much every OS in existence today. The subsystem is built to notify applications when files on a system change. Not what has changed, just that a change occurred. The bug is allegedly quite old, too.

"We found decades-old bugs on [these operating systems], all rooted in the file-notification subsystems that every modern OS ships to inform applications when files change," said Sudheendra Raghav Neela, a doctoral student at TU Graz, in an email to The Register.

On Linux, the subsystem is called inotify and it’s been affected since 2005. On Android it’s FileObserver (affected since 2008), and on Windows - ReadDirectoryChangesW - flawed since the year 2000. On MacOS, it’s called FSEvents, vulnerable since 2007.

In the paper, the researchers claim file event information can help attackers conclude what other users on a computer are doing. They can launch an inter-keystroke-timing attack, inferring what users are inputting (both locally and remotely), reveal which websites they visit, and possibly even steal login credentials through UI redress.

The problem stems from the fact that unprivileged users are allowed to access the file notification subsystem. This primarily relates to files that can be read by multiple users, but apparently, there are quite a few files on a system that fall into that category.

No patch

"On Linux, watching a readable directory leaks events on files inside it you cannot even read: watching /dev/input gives a notification on every keystroke, which we turn into a local inter-keystroke timing attack with a 93.1–100% [keystroke accuracy] score across seven users and a remote (SSH) one at 100%,” Neela said.

The percentage range means the attack won’t work in all cases, which is more-or-less standard with side-channel attacks. They are notoriously difficult to pull off, which is also likely why most OS makers barely flinched at the news.

All of them were notified of the findings roughly a year ago, and most of them never bothered to address it. Linux introduced some mitigations, including CVE-2025-68788, which prevents inotify from generating certain “access” and “modify” events for special files. The fix was shipped to multiple kernels and Linux distros, but it addresses only part of the broader attack techniques that the researchers described.

Microsoft and Apple apparently acknowledged the findings, but apart from that - did very little. Microsoft told the researchers the behavior of ReadDirectoryChangesW was "by-design", although the feature is undocumented. They believe the ability to monitor file paths across users is not a vulnerability worthy of a patch. The report does not mention Apple doing anything about it, either.

Combatting mould and controlling moisture in your home doesn’t have to be an expensive investment; at least that’s what Robert Dyas is proving with its budget-friendly dehumidifier.

The home and electrical retailer is currently listing the Daewoo 700ml dehumidifier for £34.99, built for tackling humidity levels in smaller spaces. It’s also worth noting that it’s not available on the flagship Daewoo online store, so not only is it the cheapest we’ve seen, but it’s unclear whether it’ll be restocked on the Robert Dyas store if it were to sell out.

Cheap alternatives to pricier tech brands are somewhat of a rising craze, especially among users who aren’t fussed about devices with all the bells and whistles. Earlier this week, Lidl announced the return of its £80 dehumidifier, but it’s more than double the price of Daewoo’s own. While it’s a lot cheaper, it’s also a lot smaller.

Daewoo’s dehumidifier is a lot smaller than other cheap models we’ve seen recently, with dimensions of H:11.0 x W:16.0 x D:11.0 cm and a water tank with a 700ml capacity. While this requires frequent emptying, it’s an ideal fit for smaller spaces in your home (rooms sized up to 12m² to be exact), meaning it’s lightweight and easily portable.

Functionality-wise, Daewoo’s mini dehumidifier doesn't sound too dissimilar to what other budget rivals have to offer. To prevent overspilling, the appliance is fitted with an alarm system, which alerts you when it detects a full water tank. Its product listing also states that the dehumidifier can extract up to 300ml of moisture per day.

One of the biggest concerns with dehumidifiers is the noise level, because there’s nothing worse than running one overnight and having it disturb your sleep with its raucous operational sounds. Luckily, Daewoo’s dehumidifier functions at a low noise level, making it a great fit for bedroom spaces while you’re getting your beauty sleep.

Compared to other models out there, Daewoo’s dehumidifier is one of the smallest options we’ve seen. But in spite of its compact size and basic features, if you’re sticking to a certain budget and don’t need a massive appliance, this option gives you the best of both worlds.

If you're unsure which type of dehumidifier best suits your needs, you can check out our guide to desiccant and compressor dehumidifiers.

China reportedly probes DeepSeek and Moonshot after Anthropic alleged user requests reached Claude. Here’s what the data-routing claims mean for AI customers.

The post China Reportedly Probes DeepSeek, Moonshot Over Claude Data Routing appeared first on TechRepublic.

The food processor and blender attachments are handy, while other elements feel like overkill.

Spoilers for MobLand season 2 episode 2 ahead.

Start talking, copper. That's the delicious line we were left on last week, as MobLand season 2 episode 1 gave us our first look at the new villain, Frankie (Johnny Flynn).

He's been picked by Colin (Toby) as a "knight in shining armor" to ride into battle on behalf of Kat McAllister (Janet McTeer), allowing her to take control of London from the Harrigans without ever being directly involved herself.

At the moment, Conrad (Pierce Brosnan) is too busy fighting with Kevin (Paddy Considine) and paying no attention to Harry (Tom Hardy) to be able to fully recognize this. Even Kevin doesn't understand what's coming, with Harry describing Kat as "Her mob has eight trillion in cash and the world's biggest nuclear arsenal."

This week, they're in for a nasty wake-up call. MobLand season 2 episode 2 is now on Paramount+, so let's dig a little deeper into what's actually happened.

Jan has a suspicious car accident while Conrad's health worsens

We start episode 2 following Gina (Teddie Allen) and Eddie (Anson Boon) as they party the early hours away and arrive back at their flat with their bodyguards, with Harry watching them from a car further down the road.

Jan (Joanne Froggatt), meanwhile, is at a spin class, ignoring Harry's "urgent" calls as she begins to drive back home. Before she gets there, her bumper is hit from behind by another car, with the American driver incredibly apologetic. Jan, infuriated, is having none of it, and the pair exchange numbers before she angrily drives away.

At the same time, Colin visits his local library only to get a call from Kat as he's checking a book out (see, even gangsters think it's cool to utilise public services). She gives him the go-ahead to spring Frankie into action, telling Colin to "show her what he's got."

We've really got a lot of plates spinning at once, as Conrad goes to see a doctor. The doctor tells him that Conrad is showing signs of focal atrophy, meaning that his sense of instinct, strategy, and restraint is diminishing to allow any natural sense of anger and aggression to take over, unchecked. Conrad tells him to forget that the appointment ever happened, adding, "I'm f**ing fine."

Outside, Conrad threatens a parking ticket officer with a gun when a fine is left on his car window. Maeve (Helen Mirren) calls from home, suggesting that they should invite Seraphina (Mandeep Dhillon) out to dinner to "bury the hatchet." Zosia (Jasmine Jobson) is revealed to have been tailing Conrad the entire time at Harry's request.

Kavanagh works out a mole is in the force

(Image credit: Paramount+)

At the police station, DCI Kavanagh (Ophelia Lovibond) assembles the few officers she feels she can trust to run through the events of episode 1. With the waiter witness recanting his statement after being threatened by Harry, Kavanagh is convinced that there's a mole in the force leaking information to him.

Not only is she right, of course, but she's also correct in assuming that Finch (Warren Brown) is among the potential suspects, leaving him out of the meeting. Her plan? Feed the rest of the team false information to make Harry think that the Harrigans are in the clear before they pounce.

The American driver, who we now know is called Jamie, calls Jan and offers to give her £5,000 directly, as his insurance company is saying they'll take months to process the claim. Jan barters for £6,000, to which Jamie agrees. He tries to take her out to dinner to do the handover, but Jan pushes back by suggesting a morning coffee instead.

Harry phones and Jan finally picks up, telling her that he's found Gina. The pair meet in a local park, where Harry tells her about Gina's YouTube shakedown scheme and that she's living with Eddie. Harry remains convinced that he can pull her back from the brink of being involved in organised crime, but Jan thinks the moment has passed. "You see yourself as the antidote, but you're the poison," she tells him.

At the Harrigan's house, Maeve tries to get Conrad's dogs put down, for no appropriate reason, without telling him. Paul (Emmett J. Scanlan) refuses to phone the vets without Conrad's knowledge, so Maeve organises a home visit. The doctor confirms that both dogs are in good health, leaving Maeve to unsubtly find out how to do the job herself (spoiler: with antifreeze).

Frankie is told about the Harrigan's as Seraphina squeals to Kat

(Image credit: Paramount+)

Colin arranges to meet Frankie in a nail salon, where the latter is already getting a pedicure. Colin begins to tell him about the Harrigan's empire, and how the drugs and other criminal enterprises are "there for the taking" because the family itself is spiralling into chaos. The way to get to them, obviously, is through Harry.

In an unnerving power move, Frankie decides to give Colin a pedicure himself. He asks what would happen if he was to say no to "f**king Harry up," with Colin responding that he's got enough evidence on Frankie to "get him locked up for the rest of his life." Frankie responds with a thinly-veiled threat concerning Colin's wife.

We get another history lesson from Colin when Frankie asks about the best way to get to Harry, this time about the French Catholic who assassinated King Henry IV of France in 1610, François Ravaillac. Ravaillac's execution was to be tied to four horses who each pulled his limbs in different directions, implying that the Harrigan's have four horses that would have the same metaphorical impact on Harry.

Conrad invites Seraphina to dinner, who is immediately suspicious of Maeve's intentions. She reluctantly agrees, but immediately phones the number Kat gave her in episode 1 to reveal Conrad's plans. The voice on the other end of the phone is revealed to be Jamie, Jan's car accident stranger.

Gina and Jan meet, with Gina laying on the success of her YouTube shakedowns thick. Jan tells her about the divorce, with Gina trying (badly) to hide how much her family's dysfunction has been affecting her. Eddie arrives to meet Gina, immediately getting feisty with Jan, who mildly threatens him in return.

Colin correctly guesses that Bella will be the best way to get to Harry

(Image credit: Paramount+)

While Colin is at home watching TV with his wife, Frankie rings to ask who Harry's four horses might be. Colin lists off the Harrigan's who are most likely to crack, while also telling him about Jan and Gina. However, he guesses that Kevin's wife Bella (Lara Pulvey) will be the best bet... and he's right.

As luck would have it, Harry makes his way to see Bella to discuss what Gina and Eddie have been up to together. They have a stilted conversation about parenthood, with Harry opening up about Jan asking for a divorce. Bella thinks that Kevin would feel insecure if he were to know that Harry was there with her alone, despite nothing going on between them.

As he leaves, we see Jamie and Jan meet up for coffee. Jamie gives her £7,000 in a white envelope, which is even more than she asked for. Jamie tries to get to know her and ask about her life, but Jan immediately leaves once she's got the money.

We also see Eddie take a call from Maeve to ask if he's got rid of Gina, which was her request in episode 1. Eddie says that he doesn't want to, claiming that the pair work well together as a team.

Frankie leaves Bella for dead — and makes sure Conrad knows it

(Image credit: Paramount+)

Jamie rings Seraphina as she gets ready to meet Maeve and Conrad, and tells her not to go to the restaurant. He doesn't say why, but claims it's important... and she obliges.

Then, a lot of things happen at once. We see Maeve and Conrad arrive at the restaurant, with Maeve remarking that Seraphina is "rude" for being so late. As more time passes, Conrad is inclined to agree, but he's then called away when a waiter says there's a call for him on the main phone. He's confused as to how anyone would know he's there, but we know it's not Seraphina — she's tried calling Conrad's phone, which Maeve declines.

At the same time, Paul and Fergus (Jack Archer) go for a drink outside a nearby pub. As Fergus admits that he's worried about his family's safety now that he's working in organised crime, Paul heads in to get another drink at the bar. While he does, a man in a van arrives as asks Fergus for directions to the nearest A-road. As Fergus approaches, the van door opens and a masked man shoots Fergus point-blank in the head.

Also at the same time, Harry tries to leave Jan a voicemail about moving abroad for a fresh start as Kevin calls Bella to check on her. Harry is sitting outside Gina's flat, shooting a bunch of masked men arriving nearby. He checks that the pair aren't hurt before leaving.

Bella, meanwhile, isn't so lucky. Masked man shoot down the outside security before storming the house, leaving Bella to make a run for the basement while still on the phone to Kevin. Kevin says that he's on his way, but it's too late... Frankie, who appears once the rest of the men have gone in, gets to her first.

As Conrad reaches the restaurant phone, Frankie finds Bella cowering in a downstairs bathroom, pointing a gun with a silencer directly at her. Conrad answers the phone, as Frankie picks up his to say just one word: "Bang."

Elon Musk says a 200-mph Hyperloop could connect Austin and San Antonio in under 30 minutes. Here’s what we know about the Texas proposal.

The post Elon Musk Wants a 200-MPH Hyperloop: 2.5-Hour Trip Could Take 30 Minutes appeared first on TechRepublic.

Google Chrome 154 fixes 108 security vulnerabilities, including 11 Critical flaws. Here’s what users and IT teams should do now.

The post Google Chrome 154 Fixes 108 Security Flaws: 11 Are Rated Critical appeared first on TechRepublic.

This 10th generation iPad handles video calls, note-taking, and field work without the cost of a new one.

The post This 256GB iPad Built for Work, Refurbished & Available for $299.99 appeared first on TechRepublic.

• Microsoft pledges $10 billion to support the Middle East's technological ambitions
• A $400m subsea cable expansion is also in the works
• The company stressed push for its educational support schemes

Microsoft has revealed plans to spend more than $10 billion in the Middle East between now and 2030, spread across the UAE, Saudi Arabia, Qatar and Kuwait.

Although the company already has substantial infrastructure already rooted in the region, including cloud regions for the UAE, Qatar and Saudi Arabia, it hopes that further investment will help increase regional access to its cloud and AI tools.

Microsoft President Brad Smith noted the region's ongoing digital transformation, appearing to also acknowledge the impacts of geopolitical conflicts. "We will build on the work we have done to stand by these countries’ governments and people through a period of significant challenges," Smith wrote in a blog post.

Microsoft invests $10bn to support Middle East technological transformation

The company also announced a series of initiatives that will fall under the $10 billion plans, including expanding cloud and AI infrastructure, improving local digital resilience, strengthening cybersecurity and backing educational schemes.

"Our responsibility is not only to invest in the technology that enables that progress, but to help provide the digital resilience, security and continuity it depends on," Smith added in another post.

Naturally, clean energy generation and a close eye on both water consumption and replenishment are core to the company's upcoming projects.

On the resilience front, Microsoft plans to invest a further $400 million in subsea and terrestrial cables by the end of the decade, building on top of its existing SeaMeWe-6 subsea cable which has points in Qatar, Saudi Arabia and the UAE. Microsoft is just one of the 16 companies that look after the cable, which stretches from Singapore to France.

In a bid to pacify job concerns, Microsoft also asserted that it will upskill more than 4.2 million people across the Middle East by 2030 – around 8% of the four countries' combined populations (but a bigger percentage if you only consider working citizens).

Hackers are actively exploiting CVE-2026-87902, a critical WordPress flaw that can lead to remote code execution. Here’s what admins should do.

The post WordPress Flaw Under Active Attack: Hackers Target CVE-2026-87902 for Code Execution appeared first on TechRepublic.

Vonder is making camera-free smart glasses that can differentiate between personal voice memos and conversations. I tried on some of the frames ahead of their November launch.

Meta's $1,299 VR Glasses combine 5K displays, AI, gesture controls and virtual desktops in a lighter headset powered by a separate compute puck.

The post Meta Unveils $1,300 VR Glasses With AI, Eye Tracking and Virtual Workspaces appeared first on TechRepublic.

I've recently been re-watching Star Trek: The Original Series on DVD - you know the ones, in the colored clamshell cases with unaltered special effects. Just as Kirk intended. That got me thinking about how to bring the Enterprise into my workspace. Because despite the rumors, tech journalists aren't exploring life beyond our own solar system nearly as often as you'd think.

Now, I can't afford to rebuild my office into an exact replica of the bridge of the Enterprise (my wife simply won't allow it, unfortunately). But what I can do is find some cool Star Trek home office gear that at least lets us pretend we're boldly going where no one has gone before, even when we're just replying to emails from the captain boss.

Starfleet-approved home office gear

FAMETEK Star Trek TNG USS Enterprise Bluetooth Speaker

The Unemployed Philosophers Guild Star Trek Transporter Heat Transforming Mug

The Unemployed Philosophers Guild Star Trek Sticky Notes Booklet

Open Road Brands Star Trek Starship Chart Silver Metal Sign

VINYL REVOLT Art Home Room

Star Trek: The Next Generation 2-set tumblers

The Unemployed Philosophers Guild Star Trek Memo Pad

Star Trek Desk Lamp

Silver Buffalo Star Trek NCC-1701 Fleece Throw Blanket

GRAPHICS & MORE Star Trek United Federation of Planets Coaster Set

The Unemployed Philosophers Guild Trek Captain's Log Large Notebook

GRAPHICS & MORE Star Trek United Federation of Planets Chrome Plated Metal Envelope

GRAPHICS & MORE Star Trek Starfleet Command Mouse Pad

Bomb Pop Boutique Desk Organizer

Numskull Accessory Locker & Storage Stand

UHURU Wireless Gaming Mouse

Workman Publishing Star Trek: Light-And-Sound Communicator

Entertainment Earth Klingon Insignia Chair Capes

The EU and Philippines are nearing a trade pact that could reshape digital commerce, cloud access, and public-sector tech procurement.

The post EU-Philippines Trade Deal Nears Final Agreement, but Key Digital Rules Remain Unpublished appeared first on TechRepublic.

Googlebook, Galaxy Book, Chromebook Plus, and Windows laptops take different approaches to Android apps, file sharing, messages, calls, and phone continuity.

The post Best Laptops for Android Users in 2026: Googlebook, Galaxy Book and More appeared first on TechRepublic.

• A new PlayStation Portal software update has been released
• The update introduces a new 80% default charging limit to ensure the device's long-term battery health
• Players can increase the limit manually, but Sony advises against it

Sony has rolled out a new PlayStation Portal software update to improve stability and support the device's long-term battery health.

As detailed in the version 7.1.7 patch notes, the update "introduces changes to how your PS Portal charges in order to support the long-term battery health of your device" and means that it will now charge to just 80% by default.

While 80% is the default limit, users can increase the cap at any time in Settings > System > Battery; however, Song strongly recommends the alternative as it could impact the PS Portal's longevity.

"Selecting a charge limit over 80% might impact battery performance and overall stability, reducing long-term battery health," the patch notes.

It's reasonable to want to charge your device to 100% every time the battery depletes, but Sony's new default charge limit sounds like a great solution if you want to keep your PS Portal in good shape for a long time.

The full version 7.1.7 patch notes can be read below.

• This update introduces changes to how your PS Portal charges in order to support the long-term battery health of your device. After updating, your device will charge to 80% by default. You can change the charge limit at any time in Settings > System > Battery.
  • Selecting a charge limit over 80% might impact battery performance and overall stability, reducing long-term battery health.
• Make sure to update your PlayStation Link device to the latest device software version to connect to PlayStation Portal.
  • To update your PlayStation Link device, connect it to a PS5 or PC using its PlayStation Link USB adapter. For more details visit the guides below.
• We've improved system software performance and stability
• We've improved the messages and usability on some screens

OpenAI launched GPT-6 Sol and Luna with lower API prices, cheaper caching and stronger coding results aimed at reducing the cost of AI agents.

The post GPT-6 Sol and Luna: What OpenAI’s Cheaper Models Mean for AI Agents appeared first on TechRepublic.

Five AirPods Pro 3 alternatives from Sony, Bose, Samsung, CMF, and Sennheiser compete on ANC, battery life, Android support, comfort, and price.

The post 5 Best AirPods Pro 3 Alternatives for 2026 appeared first on TechRepublic.

The best Android video editing apps for 2026 include Adobe Premiere, CapCut, LumaFusion, PowerDirector, and KineMaster for different editing needs.

The post Best Video Editing Apps for Android in 2026: Premiere, CapCut, LumaFusion and More appeared first on TechRepublic.

Snapdragon 8 Elite Gen 6 could bring faster performance, more on-device AI, better gaming, and upgraded cameras to 2027 Android phones.

The post Snapdragon 8 Elite Gen 6: What Qualcomm’s 5GHz Chip Means for 2027 Android Phones appeared first on TechRepublic.