New research from Bitdefender and NETGEAR has raised questions about the security and privacy risks posed by internet-connected devices in the home, with smart TVs identified as the largest single category of observed vulnerabilities.
The Bitdefender and NETGEAR 2026 IoT Security Landscape Report analysed 5.4 billion security events across about 10.4 million protected home networks over nine months. It found the average household now has 24 connected devices, up from 22 last year, increasing the number of potential entry points for attackers.
In the report’s vulnerability observations by device type, smart TVs accounted for 22.7%, ahead of smart plugs (22.4%) and network-attached storage devices (22%). Together, these three categories represented more than two-thirds of observed vulnerabilities, according to the report.
The report also recorded 4.85 billion automated port scans over nine months—about 19.2 million per day—reflecting what it described as constant probing of consumer networks. It further stated that almost 99.97% of observed vulnerabilities were associated with publicly documented flaws, pointing to the continued exposure created by unpatched or unsupported devices.
Alongside device security, the report cited third-party investigations suggesting some smart TVs may collect voice recordings, track viewing behaviour, monitor other devices on the home network and gather location data, with some collection potentially continuing even when a TV appears switched off. The email pitching the report noted these privacy claims draw on cited third-party investigations rather than findings independently verified by the report authors.
The research also highlighted concerns around free smart TV applications that may use a household’s internet connection to route third-party traffic, including for activities such as AI data scraping, potentially without consumers fully understanding the permissions granted.
The report recommended steps including updating routers and connected devices, replacing products that no longer receive security updates, and changing default passwords. NETGEAR’s communications representative said an interview with a NETGEAR spokesperson could be arranged to discuss the findings and practical steps for households.
You can read the full report here.
