As artificial intelligence continues its rapid expansion, concerns around data privacy, web scraping, and digital infrastructure are evolving beyond hyperscale data centers and cloud computing facilities. New research published by Include Security suggests that a less visible component of the AI ecosystem may already be sitting in millions of homes worldwide: the smart TV.
The findings shed light on how residential proxy networks are increasingly being used to facilitate large-scale web scraping activities, allowing organizations to collect publicly available internet data through consumer internet connections rather than traditional cloud infrastructure.
While the practice may be legal when implemented with user consent, the research raises important questions about transparency, informed consent, cybersecurity visibility, and the growing role of connected devices in the AI economy.
The Hidden Infrastructure Behind AI Data Collection
Modern AI models require enormous amounts of data for training, retrieval, search optimization, and agent-based reasoning.
However, websites increasingly deploy sophisticated anti-bot technologies from providers such as Cloudflare, DataDome, and HUMAN Security to prevent large-scale automated scraping originating from cloud environments.
As a result, many organizations have turned to residential proxy networks.
These networks route web requests through residential internet connections, making traffic appear to originate from legitimate home users rather than automated data collection systems.
According to Include Security’s research, one of the most prominent players in this space is Bright Data, a company that markets one of the world’s largest residential proxy networks, claiming access to hundreds of millions of residential IP addresses globally.
The company obtains this network through software development kits (SDKs) embedded into partner applications, allowing participating devices to act as proxy nodes for internet traffic.
Why Smart TVs Have Become an Attractive Target
The research highlights a significant shift toward Connected TV (CTV) platforms.
Unlike smartphones, smart TVs offer several characteristics that make them particularly attractive as residential proxy endpoints:
- Constant power supply
- Stable high-speed internet connectivity
- Continuous availability
- Minimal user monitoring
- Limited security tooling
- Lower enterprise oversight
A television remains connected even when not actively being used. It rarely changes networks, does not suffer battery limitations, and often operates with little security visibility compared to laptops or corporate devices.
Researchers argue that these characteristics create an ideal environment for residential proxy operations.
What the Researchers Observed
During a month-long investigation, Include Security analyzed network behavior associated with a Bright Data SDK embedded within consumer applications.
The research found that participating devices established persistent communications with remote infrastructure that coordinated scraping-related activities.
According to the report, the SDK:
- Retrieves operational configurations from remote servers.
- Maintains persistent communication channels.
- Collects device telemetry data.
- Determines when a device is eligible to relay traffic.
- Executes assigned internet requests using the device’s residential IP address.
Researchers also observed mechanisms that could reduce the effectiveness of traditional network inspection methods, potentially limiting visibility for users, security teams, and enterprise administrators.
Importantly, the report does not accuse Bright Data of malicious activity. Instead, it focuses on understanding how the technology operates and the implications for device owners.
The Growing AI Scraping Economy
The investigation arrives amid growing debate surrounding AI training data acquisition.
AI developers, search providers, data brokers, and analytics organizations require vast quantities of publicly available web content. As websites strengthen anti-scraping protections, residential proxy networks have become increasingly valuable.
Industry observers have noted that residential proxy infrastructure now represents a significant component of the broader AI supply chain.
This trend creates a complex cybersecurity challenge.
While some residential proxy services operate through explicit user agreements, criminal groups have also abused similar technologies through botnets, compromised devices, malware, and infected IoT hardware.
The result is a blurred landscape where legitimate and malicious infrastructures often appear technically similar from a network perspective.
Cybersecurity and Privacy Implications
The broader concern extends beyond bandwidth consumption.
Security professionals increasingly worry about:
- Reduced visibility into third-party traffic passing through consumer devices.
- Potential reputational risks if residential IPs are associated with unwanted activity.
- Expanded attack surfaces created by embedded SDKs.
- Difficulties auditing third-party software components.
- Insufficient user awareness regarding consent mechanisms.
For enterprises, unmanaged consumer devices used by remote employees could introduce additional complexity into corporate risk assessments.
As organizations continue to adopt hybrid work models, understanding what software is running on employee-owned devices becomes increasingly important.
Why This Matters for the Middle East and Africa
The findings are particularly relevant across the Middle East and Africa, where smart TV adoption, mobile-first connectivity, and digital transformation initiatives continue to accelerate.
Countries including the UAE, Saudi Arabia, Qatar, South Africa, Kenya, Egypt, and Morocco have experienced significant growth in connected consumer technologies.
As governments invest heavily in AI strategies, smart city initiatives, and digital economies, awareness of how consumer devices participate in global data ecosystems becomes increasingly important.
For regulators, telecom providers, and cybersecurity professionals throughout the region, the report highlights the need for greater transparency surrounding data collection practices and residential proxy technologies.
10 Recommended Actions for Security Teams
1. Inventory Connected Devices
Maintain visibility over all smart TVs, streaming devices, and IoT assets connected to corporate and home-office environments.
2. Review Third-Party Applications
Assess applications installed on smart devices for embedded SDKs and external communications.
3. Monitor Residential Proxy Indicators
Watch for traffic associated with known residential proxy infrastructure.
4. Strengthen DNS Security Controls
Implement DNS filtering to detect and block suspicious domains where appropriate.
5. Expand IoT Security Programs
Include smart TVs and connected entertainment systems within broader cybersecurity assessments.
6. Educate Employees
Raise awareness about consent-based data-sharing mechanisms embedded within consumer applications.
7. Conduct Supply Chain Reviews
Evaluate third-party software components used within enterprise environments.
8. Deploy Network Segmentation
Separate consumer IoT devices from business-critical systems.
9. Enhance Endpoint Visibility
Use security tools capable of identifying unusual network behaviors on connected devices.
10. Establish Governance Policies
Develop clear policies regarding consumer devices used in remote-working environments.
A New Frontier in the AI Ecosystem
The Include Security investigation provides a rare glimpse into a largely invisible layer of the modern internet.
Whether viewed as an innovative method of data collection or a growing privacy concern, residential proxy networks are becoming an increasingly important part of the AI economy.
As AI adoption accelerates globally, organizations, regulators, and consumers will likely face growing pressure to better understand how connected devices participate in data collection ecosystems.
The smart TV hanging on a living room wall may no longer be just an entertainment device. Increasingly, it could be part of a much larger digital infrastructure supporting the next generation of artificial intelligence.
