LIVE · cybersecurity feed
Live wire
security

LG to Ban Residential Proxies from Smart TV Apps

LG Electronics USA has announced plans to remove smart TV applications from its webOS platform that incorporate residential proxy software development kits (SDKs). The company stated that any developers failing to comply with this directive will have their apps suspended. This decision follows research published on July 2, 2026, by the security firm Spur, which identified a significant…

ZeroDay News ·

Source: Krebs on Security

LG Electronics USA has announced plans to remove smart TV applications from its webOS platform that incorporate residential proxy software development kits (SDKs). The company stated that any developers failing to comply with this directive will have their apps suspended. This decision follows research published on July 2, 2026, by the security firm Spur, which identified a significant prevalence of such SDKs in smart TV applications.

Spur's research indicated that over 42% of apps available for LG smart TVs contained SDKs that convert the television into a residential proxy node. The study also found that more than a quarter of apps designed for Samsung's Tizen operating system included similar components.

John Taylor, Senior Vice President at LG, confirmed that the company is actively collaborating with app developers to eliminate the residential proxy functionality from their webOS applications. He emphasized that the use of residential proxy networks is not an intended function for LG smart TVs. Taylor further stated that LG is committed to preventing these networks from being integrated into its smart TV apps in the future and that a review of existing applications is currently underway. The company plans to enhance its evaluation process for developer-submitted apps, including those that might incorporate residential proxy SDKs, as part of ongoing efforts to improve platform quality and user experience.

Residential proxy providers compensate app developers to include SDKs that transform a user's device into a proxy node, which is then rented to paying customers. Spur's report found these SDKs embedded in a variety of LG and Samsung smart TV apps, ranging from simple games like Pac-Man to screensavers and file utilities. For instance, a Pac-Man app from Bright Data offered users the choice between viewing advertisements or allowing their TV to serve as a residential proxy node.

Bright Data was identified by Spur as accounting for the majority of proxy SDKs across both Samsung and LG smart TVs. While proxy providers like Bright Data claim to implement rigorous "know-your-customer" processes to validate legitimate uses, often tied to content-scraping activities, and to incorporate technological safeguards to prevent customers from controlling other devices on the proxy user's local network, Spur argues that the core issue is the widespread embedding of these SDKs in devices that consumers do not typically perceive as computers and are not equipped to audit.

Spur's Trevor Sutter highlighted that a one-time consent prompt within a TV app is insufficient for meaningful transparency, ongoing control, and platform oversight. Sutter also noted the amplified risk when consent is provided by household members, such as minors, who may not be authorized to do so.

This move by LG to address residential proxy SDKs comes after the company recently faced scrutiny regarding another partnership. Earlier in July, it was reported that certain LG LCD monitors automatically install an application promoting paid McAfee antivirus subscriptions via Windows Update, without requiring user approval.

ShareXLinkedInWhatsAppFacebook

More News

view all →
security

Canadian cybersecurity executive arrested in federal extortion case

A Canadian cybersecurity executive was arrested in Pennsylvania on Thursday, facing federal charges of conspiracy to commit extortion. Edward Dubrovsky, 54, a co-founder and former Chief Operating Officer of CYPFER, a firm specializing in ransomware negotiation, is charged with conspiring to threaten the confidentiality of information for extortion and conspiring to commit Hobbs Act extortion,…

breach

Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management

AI SPERA, the company behind the cyber threat intelligence platform Criminal IP, has announced AITEM (AI-Powered Threat Exposure Management), an expansion of its Attack Surface Management (ASM) offerings. AITEM aims to move beyond traditional asset discovery to provide a more comprehensive approach to understanding, prioritizing, and responding to security exposures. The platform is scheduled…

ai

AI Is Getting Really Good at Messing With Cybercriminals

Anti-cybercrime initiatives are increasingly deploying artificial intelligence to disrupt scammers by engaging them with lifelike bots, which the criminals mistake for genuine victims. This strategy aims to waste scammers' time and resources while gathering intelligence on their operations.

ransomware

FBI Arrests Ransomware Negotiation Firm Co-Founder in ShinyHunters Probe

The Federal Bureau of Investigation (FBI) has reportedly arrested Edward Dubrovsky, a co-founder of the ransomware negotiation firm Cypfer and currently associated with CyberSteward. The arrest is said to be part of the ongoing ShinyHunters investigation, specifically in connection with an incident involving FBI job applicant data.

ai

The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't

A new report highlights a significant blind spot in enterprise security architectures concerning the proliferation of third-party AI agents. The forthcoming 2026 State of Agent Security Report indicates that current security models, often designed to protect AI systems directly chosen and deployed by an organization, frequently fail to account for AI capabilities embedded within third-party…

security

Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison

A former core infrastructure engineer has been sentenced to prison for an attempted cyber extortion plot against an industrial firm. The engineer reportedly deleted administrative accounts and reset hundreds of user passwords, subsequently demanding a ransom of 20 Bitcoin to prevent further disruption to the company's servers.