Google says some Pixel phone owners were hacked in zero-day attacks

In Brief

Google says that a bug successful its Pixel smartphones’ bundle was exploited successful constricted and targeted cyberattacks. The institution said Tuesday that the bug, tracked arsenic CVE-2026-58704, has present been patched. 

According to the limited details astir the vulnerability, the bug was recovered successful Pixel phones’ modem, which lets the instrumentality to link to the internet. Exploiting the bug could let an attacker to summation entree beyond the sandboxed walls of the modem and into the broader phone’s data, a vulnerability known arsenic privilege escalation.

The bug tin beryllium exploited silently and without immoderate enactment from the telephone proprietor successful what’s known arsenic a “zero-click” attack, meaning a unfortunate does not request to click connected a nexus oregon unfastened a file.

Google did not accidental who was exploiting the bug, and a spokesperson for Google did not instrumentality a petition for comment. It’s not uncommon for bugs similar this 1 to beryllium abused by surveillance vendors, such arsenic spyware makers, who merchantability entree to their data-stealing bundle to governments and instrumentality enforcement agencies.

Subscribe for the industry’s biggest tech news