30
30
57
30
42
30
30
30
50
45
60
45
⚡ Weekly Recap: SD-WAN 0-Day, Critical CVEs, Telegram Probe, Smart TV Proxy SDK and More
60
30
30
45
Stopping the smart TV from being used against you
Guide describes practical hardening steps to prevent smart TVs from spying on their owners or being used against them.
A tutorial-style post walks through defensive measures to keep a smart TV from collecting user data or being leveraged against its owner. The piece is a consumer IoT privacy and hardening guide rather than a disclosure of a specific vulnerability.
15
35
60
45
30
30
55
45
60
42
LG accused of 'egregious invasion of privacy' over TV data collection
Gamers Nexus alleges LG smart TVs record audio and generate transcripts in standby while harvesting location, network, and device data for LG's ads business.
Researchers at Gamers Nexus claim LG smart TVs continued capturing audio after voice recognition activated, including in standby, producing plaintext transcripts, some stored locally and sent after reconnection. Testing reportedly found collection of IP addresses, location data, nearby Wi-Fi network details, and enumeration of unpaired local devices such as phones, routers, and PCs, with data flowing to LG Ads Solutions. The team is coordinating responsible disclosure of vulnerabilities including an alleged remote code execution flaw. LG says its TVs do not collect, record, or store ambient conversations and that voice recognition is optional.
30
45
ThreatsDay: 200 Android Flaws, Browser-Built Phishing, 119K Scam Shops + 23 More Stories
Hacker News ThreatsDay digest: malicious browser extensions, AI-agent intrusions, NCSC shadow AI warning, M&A wire fraud, and 119,000-domain fake shops.
Socket found four malicious Chrome and Firefox extensions (J7Tracker, VREO, Orbit Tracker) stealing session tokens and wallet data from Axiom Trade and Padre users via attacker-controlled Vercel deployments. Hunt.io reported a Chinese-speaking operator using Claude Code, Alibaba Qwen, and DeepSeek with the SecFlow orchestration framework to automate intrusions against government and financial targets in Afghanistan, Thailand, Taiwan, and the US. The UK NCSC warned shadow AI use risks breaches and regulatory failure, Microsoft announced privacy-preserving Windows Age APIs, and Gen Digital described fake M&A wire-fraud scams. A 119,000-domain fake-shop operation called DoppelCart was also highlighted.
25
30
57
35
60
42
42
57
60
30
42
57