Skip to content
NewA calmer, faster ZeroHour
StoryResearchmedium

Researcher claims root access and tracking on a 2025 Samsung TV

2 sources · 2 articlesFirst reported Updated ()1
What's new

First merged summary.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

An unverified researcher account says a 2025 Samsung TV collected audio and tracking data; Samsung has not responded.

A researcher using the name log4j says zero-day flaws gave him a root shell on a 2025 Samsung Smart TV after AES-encrypted Tizen firmware blocked key recovery without hardware access. From October 21, 2026, he described automatic content recognition, screenshots, geolocation, network mapping, an advertising identifier, profile building, and a package he calls always-on voice. He says sets without microphones can use a soundbar or Bluetooth microphone, and that turning ACR off may not stop telemetry. Samsung has not publicly responded, and the claims have not been reproduced on an unmodified set. A February 26, 2026 Texas agreement limits Samsung ACR collection there but does not confirm these claims.

Key facts
  • Log4j named packages csapi-tv-service-alwaysonvoice and rmdemon.
  • He claims logged events included dogs barking and babies crying.
  • ngxson’s rooted Tizen test saw the microphone open for five seconds.
  • Texas’s February 26, 2026 deal requires express consent before ACR collection.
  • OpenAI deactivated log4j’s account for “Cyber Abuse”; OpenAI has not explained.
  • A New York ACR class action was voluntarily dismissed in July.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Timeline

dated events in the reporting · oldest first
  1. Feb 26, 2026Texas agreement limits Samsung ACR collection without express consent. · Cyber Security News
  2. Oct 21, 2026Researcher began describing tracking and always-on voice claims. · Cyber Security News

What each outlet adds

beyond the shared facts
  • Cyber Security NewsRoot shell, encrypted firmware, ngxson microphone test, and OpenAI account deactivation.
  • Malwarebytes LabsSoundbar or Bluetooth mic claim, ACR-off telemetry, and newer ACR lawsuits.
Vendors
Samsung
Products
Samsung Smart TVTizenSamsung smart TV
Organizations
OpenAITexas Attorney General's OfficeEPIC
Countries
United States

Coverage

oldest first · one row per article · UTC
  1. · 3d ago Cyber Security NewsFirst report

    Researcher claims root on 2025 Samsung Smart TV, details tracking

    The claims, including always-on voice telemetry, have not been reproduced on an unmodified set, and Samsung has not responded.

  2. · 3d ago Malwarebytes Labs

    Researcher says Samsung TVs can listen through connected soundbars

    The unverified claim says an “always on voice” package reports events and that turning ACR off may not stop telemetry.