Bitdefender and NETGEAR have released their 2026 IoT Security Landscape Report, examining cybersecurity threats affecting connected homes and the growing number of internet-connected devices on household networks.

The report draws on data from approximately 10.4 million smart homes globally between January and September 2026. Researchers analysed 5.4 billion security events and 1.2 billion vulnerability observations, identifying trends in device vulnerabilities, automated attacks and potential entry points for cybercriminals.

The findings show that the average household now has 24 connected devices, up from 22 in 2025. These devices can be targeted directly, used to relay third-party internet traffic, gather information or provide access to other devices on a home network.

Smart TVs recorded 270.3 million vulnerability observations, the highest of any device category, while smart TVs, smart plugs and network-attached storage accounted for 67.1% of all observations.

The report found that smart TVs represented 22.7% of vulnerability observations, followed by smart plugs at 22.4% and network-attached storage at 22%. The researchers say devices that remain connected for years, particularly those no longer receiving software updates, can present ongoing security risks.

Reconnaissance accounted for 90.1% of detected attack activity, with automated scans identifying vulnerable devices and networks for potential exploitation or recruitment into botnets.

The research also found that 99.97% of observed device vulnerabilities were associated with publicly documented Common Vulnerabilities and Exposures (CVEs). Weak passwords and plaintext authentication accounted for a small proportion of the findings.

Bitdefender senior vice president of operations – consumer solutions group Ciprian Istrate says the increasing number of connected devices was creating more potential entry points for attackers: “The increase in connected devices has turned homes into complex digital ecosystems, and every addition gives attackers another doorway in.”

“Cybercriminals are using AI to speed attacks on newly discovered vulnerabilities from days to a matter of hours, putting families at far greater risk. Our research with NETGEAR shows that router-level protection is now critical for defending against malware, identity theft and increasingly sophisticated scams.”

The report also examined potential outcomes of device vulnerabilities. Overflow errors accounted for approximately 54% of identified vulnerability types, followed by denial-of-service vulnerabilities at about 18% and memory corruption at about 17%.

More severe potential outcomes included privilege escalation, at 5.3%; code execution, at 3.8% and information disclosure, at 1.2%. Combined, these categories represented approximately 10.3% of the reported outcomes.

Mobile phones accounted for 20.4% of devices identified on home networks, followed by televisions at 10.6%, computers at 10%, network equipment at 6.2% and streaming devices at 5.4%. The share of streaming devices declined from 7.3% in 2025. Tablets and IP cameras accounted for 4.8% and 4.1%, respectively.

The report also considered wider developments in IoT security, including the dismantling of four IoT botnets by the US Department of Justice and the discovery of proxy software bundled into some smart TV applications. Such software can allow televisions to relay third-party internet traffic.

NETGEAR head of product and cybersecurity Chandan Nandakumaraiah says connected home security requires more than reliable connectivity.

“A connected home depends on more than speed, coverage and reliability. It also depends on the visibility and protection that services such as NETGEAR Armor powered by Bitdefender bring to activity across the network, plus security at the router level,” Chandan says.

“As enterprises get better at protecting their digital infrastructure, cybercriminals are turning to connected home devices. These devices are increasingly smart and powerful, which makes them an ideal foothold: Always on, reliable and rarely monitored. Once inside, criminals can stay hidden and move laterally across the home network. Monitoring, detecting and blocking these threats is more important than ever.”

Bitdefender and NETGEAR offer NETGEAR Armor, a security platform powered by Bitdefender and available on selected Nighthawk routers and Orbi Mesh WiFi systems. The service is designed to detect and block threats, identify vulnerabilities and help protect users against phishing and data theft.