Cyber Security News

LG Smart TVs Caught Scanning Networks and Logging Audio in Standby

Your LG smart TV may be doing far more than displaying your favorite shows while it sits “off” in the corner of your living room.

A new investigation from Gamers Nexus, conducted alongside Level1Techs and independent security researchers, alleges that certain LG OLED televisions continue to scan home networks and capture microphone audio even in standby mode, then upload that data once the set reconnects to the internet.

In a 135-minute video breakdown, Gamers Nexus founder Steve Burke detailed tests run on retail LG OLED models, including the flagship G5. Using Wireshark packet captures, the team observed the TVs actively scanning the local network for unrelated hardware such as smartphones and smartwatches belonging to staff who weren’t even involved in the testing.

Beyond device discovery, the sets reportedly logged the names and signal strengths of neighboring Wi-Fi networks along with location-adjacent data, effectively mapping the household’s entire connected environment.

The more troubling claim concerns audio. Researchers say the TVs captured clear microphone audio while the screens appeared powered down, and that this behavior persisted even after the Ethernet cables were physically disconnected.

According to the findings, the television stored the recorded audio locally and automatically uploaded it as soon as network connectivity was restored, feeding it into LG’s advertising infrastructure through LG Ad Solutions.

LG has previously stated publicly that its televisions “do not collect, record, or store ambient conversations.”

The Gamers Nexus team says its testing contradicts that assurance, as detailed in the video investigation it published, which shows on-device transcription of spoken prompts into plain-text logs rather than raw ambient recordings alone.

This distinction matters for consumers: even if LG’s marketing language is technically accurate about “ambient conversations,” the underlying voice-assistant pipeline still appears to capture, process, and retain speech data locally before it ever leaves the device.

Analysis ParameterTechnical Observation & BehaviorPrivacy & Operational Impact
Local Network DiscoveryActively scans LAN for unlinked smartphones and smartwatchesMaps home network topology without user initiation or pairing
Wi-Fi Environment ReconCatalogs neighboring SSIDs, signal strengths, and channelsEnables precise household and location-adjacent triangulation
Standby Audio RecordingTranscribes microphone audio locally when screen is offOperates while offline and uploads cached logs once reconnected
Content Recognition (ACR)Operates continuously across all inputs, including HDMITracks viewing habits in private homes, boardrooms, and clinics
Data Monetization EngineTransmits harvested data to LG Ad Solutions infrastructureExtends profiling across an estimated 33 million opted-in displays

The behavior isn’t confined to home use. Researchers noted that automatic content recognition, or ACR, keeps operating even when an LG panel is used purely as a passive HDMI monitor, meaning displays deployed in hospitals, hotel rooms, and corporate boardrooms could theoretically be swept into the same data pipeline.

One clinician who reviewed the findings reportedly raised concerns about what this means for patient confidentiality in settings where LG panels sit near sensitive conversations.

LG Ad Solutions openly markets ACR as a way to deliver “glass-level” viewing data to advertisers across all inputs, and the company has scaled the program to roughly 33 million opted-in sets in the United States alone, later expanded through partnerships with Nielsen for national audience measurement.

Security researchers responding to the disclosure recommend disconnecting smart TVs from home Wi-Fi entirely and instead routing streaming through external devices like a Roku, Apple TV, or Fire Stick, which limits the television’s own software from reaching the network.

Disabling the built-in microphone in settings, where the option exists, and periodically checking privacy dashboards for opt-out toggles are also advised as immediate mitigation steps while LG responds to the growing scrutiny.

Learn 7 Metric-Gated AI SOC Deployment Phases – Download Free AI SOC Deployment Playbook 2026.

Guru Baran

Gurubaran KS is a cybersecurity analyst, and Journalist with a strong focus on emerging threats and digital defense strategies. He is the Co-Founder and Editor-in-Chief of Cyber Security News, where he leads editorial coverage on global cybersecurity developments.

Recent Posts

Google Unveils New Android AI Protections to Block Scam Calls, Phishing Links and OTP Theft

Google has announced a new set of Android security protections designed to stop mobile scams…

4 hours ago

Hackers Exploiting Plex Vulnerabilities in the Wild to Deploy Cryptominer Malware

Hackers are exploiting flaws in Plex Media Server to install cryptocurrency mining malware, with a…

6 hours ago

Microsoft Confirms October Windows Updates Can Break Exchange Server Email Services

Microsoft has confirmed that Windows Server security updates released on October 13, 2026, can disrupt…

6 hours ago

OpenCode Security Breach Exposes Third-Party API Keys of its Console Users

OpenCode has disclosed a security breach affecting 1.4% of its Console users, warning that third-party…

1 day ago

Claude AI Solves 25-Year NSA Cryptography Mystery in Just 30 Minutes

Anthropic says an internal Claude research model has traced the origins of five NSA-supplied elliptic…

2 days ago

Hackers used Compromised ConnectWise Backup Credentials to Hack 173 Microsoft 365 Accounts

Hackers used a stolen ConnectWise Cloud Backup credential to sign in to 173 Microsoft 365…

2 days ago