Smart TVs top connected home security risks, report finds

Bitdefender and Netgear have published a report on security risks in connected homes, finding that smart TVs are the most exposed device category on home networks.

The report analysed 5.4 billion security events and 1.2 billion vulnerability observations across about 10.4 million smart homes worldwide. It found the average household now has 24 connected devices, up from 22 a year earlier.

Researchers found smart TVs accounted for 22.7% of vulnerability observations, ahead of smart plugs at 22.4% and network-attached storage devices at 22%. Together, those three categories made up 67.1% of the vulnerabilities observed across the sample.

Bitdefender and Netgear said smart TVs now sit at the centre of several types of risk in the home. One vulnerable device, the report noted, can serve as a direct target for attack, a proxy for third-party internet traffic, a sensor gathering information, or a foothold into the wider home network.

Smart TVs were the only category where all four roles converged, with 270.3 million vulnerability observations recorded.

Attack patterns

Reconnaissance activity dominated the threat landscape. Automated scans designed to identify weakly secured networks and devices represented 90.1% of detected attack activity, suggesting many connected homes are first being mapped and tested before any deeper compromise takes place.

The report also pointed to changes in the mix of devices inside the home. Mobile phones were the most common connected device on household networks at 20.4%, followed by televisions at 10.6%, computers at 10.0%, network equipment at 6.2% and streaming devices at 5.4%, down from 7.3% a year earlier. Tablets accounted for 4.8% and IP cameras 4.1%.

Most of the weaknesses observed were not new. The report found 99.97% of device vulnerabilities were linked to publicly known Common Vulnerabilities and Exposures, while weak passwords and plaintext authentication made up only a small fraction of the total.

That shifts the focus from obscure technical flaws to patching and device life cycles. The report argued that long-lived household products that remain online after software support ends are carrying a growing share of the vulnerability burden.

Software flaws

In terms of likely attack outcomes, overflow errors represented about 54% of the weaknesses tracked. Denial-of-service issues accounted for about 18%, and memory corruption for about 17%.

More severe categories were less common. Privilege escalation made up 5.3%, code execution 3.8% and information disclosure 1.2%, for a combined share of about 10.3%.

The report also examined proxy software bundled into some smart TV applications. It said the software can turn televisions into relays for third-party traffic, adding another layer of risk for consumers who may not realise their device is being used that way.

Another concern was the speed at which attackers can move from discovery to exploitation. Bitdefender and Netgear said cybercriminals are using artificial intelligence to cut the time needed to attack newly discovered vulnerabilities from days to hours.

Ciprian Istrate, Senior Vice President of Operations at Bitdefender Consumer Solutions Group, said the growth in connected devices had widened the number of entry points in the home.

"The increase in connected devices has turned homes into complex digital ecosystems, and every addition gives attackers another doorway in," said Istrate. "Cybercriminals are using AI to speed attacks on newly discovered vulnerabilities from days to a matter of hours, putting families at far greater risk. Our research with NETGEAR shows that router-level protection is now critical for defending against malware, identity theft, and increasingly sophisticated scams."

The companies linked the trend to a broader shift in attacker behaviour. As corporate networks become harder to penetrate, home environments filled with always-on consumer devices may offer a softer route in.

Chandan Nandakumaraiah, Head of Product and Cybersecurity at Netgear and member of the CVE Board, said connected household devices are becoming more attractive to criminals because they are seldom monitored closely.

"A connected home depends on more than speed, coverage, and reliability. It also depends on the visibility and protection that services such as NETGEAR Armour powered by Bitdefender bring to activity across the network, plus security at the router level," said Nandakumaraiah. "As enterprises get better at protecting their digital infrastructure, cybercriminals are turning to connected home devices. These devices are increasingly smart and powerful, which makes them an ideal foothold: always on, reliable, and rarely monitored. Once inside, criminals can stay hidden and move laterally across the home network. Monitoring, detecting, and blocking these threats is more important than ever."