Loading story…
Gamers Nexus, Level1Techs, and independent researchers reported that LG smart TVs may capture microphone audio while in hibernation or apparently off, including audio not preceded by a recognized wake word. Testing and firmware inspection allegedly found recordings retained locally in plaintext even while the television was disconnected from the internet. The researchers also said the sets collect local-device IP addresses, nearby Wi-Fi SSIDs and signal strengths, and location-related information, creating privacy and security risks if retained data is later exposed or transmitted.
LG denied that its televisions continuously record conversations, stating that voice processing begins only when users press the remote voice button or enable the Hi LG wake word. The company said wake-word detection occurs locally and unrecognized audio is immediately deleted, while describing network-device discovery as a standard capability supporting connectivity, content sharing, and smart-home features. LG added that voice recognition, Automatic Content Recognition, and interest-based advertising are separately opt-in and can be disabled.
See the reporting duties and controls this puts on the clock.
2 events from the most recent confirmed update back to the earliest known activity.
LG denied that its televisions continuously record conversations, stating that voice processing occurs only after a remote voice-button press or an enabled “Hi LG” wake word, with unrecognized wake-word audio immediately deleted. LG also said device discovery supports connectivity features and that voice recognition, Automatic Content Recognition, and interest-based advertising require separate opt-in consent and can be disabled.
Gamers Nexus, Level1Techs, and independent security researchers reported from network-traffic testing and firmware inspection that LG smart TVs collect local-device and nearby Wi-Fi data, and may capture and locally retain microphone audio, including while disconnected from the network or in hibernation mode.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See what this changes for your reporting obligations and which controls it puts on the clock.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Researchers from Gamers Nexus, Level1Techs, and independent teams allege that tested LG OLED televisions—including a retail 2025 G5—conducted local-network device discovery, collected nearby Wi-Fi identifiers, and processed microphone audio while appearing to be in standby. They reported that speech-derived logs and audio could be retained locally while the TV was offline, then uploaded after connectivity returned, reportedly to infrastructure associated with LG Ad Solutions. The investigation also found LG’s Automatic Content Recognition (ACR) operating across inputs, including HDMI, raising privacy concerns for home, healthcare, and corporate deployments. The researchers further disclosed alleged, unpatched remote-code-execution vulnerabilities in webOS network-facing services to LG and demonstrated a controlled proof of concept, though no CVEs or public fixes were cited and responsible disclosure remains in progress. A successful compromise could turn a TV into an audio-surveillance endpoint and provide an attacker a foothold on the surrounding network. LG had not publicly responded to the specific findings at publication; the allegations conflict with its existing statement that its TVs do not collect, record, or store ambient conversations. Organizations should apply available firmware updates, disable unnecessary privacy and UPnP features, and isolate TVs on an IoT or guest network.
Sep 14, 2026
Voice assistants and other smart home devices are generating detailed records that can later be accessed by companies or sought by law enforcement, raising concerns that everyday household technology may become a source of criminal evidence. Reporting highlighted that devices such as Amazon Alexa continuously collect behavioral, audio, and usage data, with wake-word systems capable of false activations that may cause unintended recordings to be uploaded for cloud processing and retention. The coverage pointed to U.S. criminal investigations in Arkansas, Florida, and New Hampshire in which Amazon Echo data was sought or used, underscoring how cloud-stored smart home records can become subpoenaable evidence. It also warned that smart TVs, robot vacuums, smart locks, Fitbits, and even connected water meters can create searchable logs of daily life, and urged users to reduce exposure by inventorying connected devices, limiting unnecessary internet connectivity, understanding whether devices are truly powered off, and keeping at least one room free of smart technology.
Aug 11, 2026
Researchers disclosed multiple smart TV vulnerabilities affecting **LG webOS** and **Samsung Tizen OS**, showing that consumer televisions can be compromised for deep system access. Bitdefender reported four flaws in LG webOS versions 4 through 7—`CVE-2023-6317`, `CVE-2023-6318`, `CVE-2023-6319`, and `CVE-2023-6320`—that can let attackers bypass authorization, create a privileged account, inject commands, and escalate privileges to **root**. The attack surface was amplified by Internet exposure: the vulnerable LG control service was intended for LAN use, but more than **91,000** devices were reportedly visible via Shodan. LG confirmed the issues after notification and released fixes before public disclosure.
Jun 29, 2026