Your LG TV could be listening to you in standby mode: New security flaw creates privacy concerns

Do you own a smart LG TV at home? If yes, then you may want to disconnect it from the internet, as newly discovered security flaws could allow attackers to eavesdrop on your conversation. However, it may not only be the case for LG TVs, as smart TVs have long raised privacy concerns. Several reports over the years have alleged that TVs could use built-in sensors to monitor viewers.

However, in the latest security findings by Gamers Nexus, along with Level1Techs and independent security researchers, LG TVs were reported to have a major security flaw and tracking capabilities, raising fresh concerns over consumer privacy in connected homes.

Must read: Are you getting spyware alerts to iPhone's lock screen: What you need to know

Reportedly, LG TVs were found to have evidence of extensive device and network discovery, automated content recognition (ACR) tracking, and security weaknesses that could be used for hacking.

How can LG TVs capture audio in standby?

In a video demonstration, Gamers Nexus revealed how a compromised LG smart TV running webOS can be leveraged to spy on users and map private home networks. Once the device is exploited, attackers can remotely activate the TV’s built-in microphone to record audio, even when the TV is turned off or in standby mode.

In addition, the audio could be stored while the TV is disconnected from the internet and can be retrieved later once the connection is restored. On the other hand, LG TVs may gather further information that may include details about what you watch, Wi-Fi networks, and other connected devices, such as phones, PCs, printers, network switches, and smart-home devices.

Must read: OpenAI makes GPT-5.6-cyber less restricted for trusted cybersecurity researchers: All details

It can also collect network names (SSIDs) and signal information, and when combined with viewing data and advertising IDs, it could potentially give a detailed picture of a household.

The researchers also report remote-code-execution vulnerabilities, giving the attacker the control to execute commands or code on a device without the owner's permission.

What should users do?

Note that this might not be an LG-specific security flaw, but a broader concern for people who own smart TVs. Therefore, users are advised to install available firmware and security updates and review privacy settings. You must also consider disabling ACR, viewing-information collection, personalised advertising, and voice-recognition features.

Researchers also advised placing smart TVs and other IoT devices on a separate guest or IoT network. This can limit the devices and systems a compromised television could potentially access.