Scandal at world-famous TV brand: Alleged to be listening to users
A cybersecurity researcher claimed that 2025 model Samsung televisions contain an always-on microphone-related audio service and various telemetry modules in their software. While it is alleged that the collected data could be shared with an ecosystem involving approximately 400 business partners, Samsung has not yet made an official statement on the matter.
As technology develops, security risks are also increasing. Especially the technological devices in our homes can pose a risk due to security vulnerabilities. In fact, a recent claim concerns millions of Samsung TV users.
An independent cybersecurity researcher using the username "log4j" on the X platform claimed that 2025 model Samsung smart televisions might be listening to users without authorization.
The researcher explained that they thoroughly examined the device's software after seeing suspiciously accurate ads on their television. The shared technical analysis findings show that various modules focused on audio detection and data collection are running in the background of the device.
What Was Found in the Software Examined Using the Security Vulnerability?
Stating that the device's software files were initially encrypted with the AES algorithm, the researcher was unable to obtain the encryption keys directly. The expert noted that they used zero-day security vulnerabilities previously unknown to Samsung to overcome this barrier. Thanks to the administrative-level access obtained, the device's operating system kernel and background services were directly inspected.
During the system scan, a special audio service directly corresponding to an "always-on microphone" role was identified. It is not confirmed whether the service in question continuously records ambient conversations; however, it was noted that this component is kept active on the system. It was reported that alongside the audio module, four different digital rights management systems were present at the software layer.
400 Business Partners and Background Tracking Modules
In the investigation, not only microphone-focused services were detected, but also numerous telemetry components reporting user behavior. It is claimed that these tools directly conduct tracking, analysis, and ad-targeting processes.
| Allegedly Detected System | Associated Function |
|---|---|
| Special Audio Service | Always-on microphone infrastructure |
| Automatic Content Recognition (ACR) | Detection and analysis of watched content |
| Location and Network Mapping | Geolocation and local network scanning |
| Telemetry Modules | Direct targeted ad display |
On the other hand, the same person claimed that there are approximately 400 different business partners that might have access permission to this large data pool collected or processed on the system. The fact that the device maps the local network and performs content recognition has raised further questions regarding the size of the collected data.
How Do These Claims Affect Users?
These claims increase personal room privacy and data security concerns, especially for owners of 2025 model Samsung televisions. It is claimed that the accurate ads shown on the screen are directly connected to these background services. On the other hand, the shared findings currently constitute a unilateral cybersecurity claim.
Furthermore, there is no statement made on the matter from Samsung's side or from independent official testing bodies yet. Therefore, whether the audio component in the software actually records the ambient environment and sends it to third parties is not officially proven.
This article was translated from Turkish. Read the original article in Turkish.
