Standby mode is a low-power operating state where a device looks inactive but may still run code, keep memory powered, listen for wake events, or buffer data for later transmission. In consumer electronics, this often means the screen is dark while firmware, sensors, and network interfaces remain partially alive. For cybersecurity, that matters because “off” is not always off.
Attackers can abuse standby mode to keep telemetry, audio capture, or local discovery functions available after the user believes a device is idle. A compromised device may also continue polling the network, retaining persistence, or collecting identifiers until connectivity returns. Defenders reduce risk by reviewing power-saving behavior, disabling unnecessary microphones or analytics features, isolating devices on separate networks, and testing traffic while the device is in standby. In practice, standby mode is a common place where privacy assumptions and actual device behavior diverge.