Home · Technology · Sep 16 archive
Google Warns of Hacked Pixel Phones in Zero-Day Attacks
Confirmed
In Short: Google has confirmed that some Pixel phone owners were targeted in zero-day attacks exploiting a critical vulnerability in the cellular modem.
Google has confirmed that some Pixel phone owners were targeted in zero-day attacks exploiting a critical vulnerability in the cellular modem, according to reports. The attacks, which are described as "limited and targeted," took advantage of a "zero-click" flaw that allowed attackers to bypass standard security sandboxes and gain access to sensitive phone data without requiring user interaction.
The vulnerability, tracked as CVE-2026-58704, was actively exploited before Google issued its September 2026 security patch to fix the critical "zero-click" vulnerability in the cellular modem of Pixel smartphones. Android Headlines reported that the targeted nature of the attacks mirrors tactics typically used by commercial surveillance vendors, who sell access to specialized spyware to governments and law enforcement agencies.
To protect their devices, Pixel owners are advised to ensure their phones are running the latest September 2026 software version. The update, which was released on September 16, 2026, brought new features like Harry Potter themes and contact VIPs, but also included more than 200 security fixes under the hood. Android Police noted that the vulnerability was related to the modem inside Pixel phones and that the best thing Pixel owners can do is make sure their phones are running the latest security patch.
While the exact number of affected Pixel models and users is not known, Google has confirmed that the vulnerability was exploited in limited and targeted attacks before the fix was released. The National Vulnerability Database, via TechCrunch, listed one of the vulnerabilities as related to the modem inside Pixel phones.
For those unaware, the modem is one of the components responsible for cellular connectivity, allowing your phone to connect to mobile networks and access cellular data. Android Police also noted that we don't know which Pixel models were affected or exactly how many users were targeted, adding to the uncertainty surrounding the incident.
What's confirmed
- Google has confirmed that some Pixel phone owners were targeted in zero-day attacks exploiting a critical vulnerability in the cellular modem, according to reports. The attacks, which are described as "limited and targeted," took advantage of a "zero-click" flaw that allowed attackers to bypass standard security sandboxes and gain access to sensitive phone data without requiring user interaction.
- The vulnerability, tracked as CVE-2026-58704, was actively exploited before Google issued its September 2026 security patch to fix the critical "zero-click" vulnerability in the cellular modem of Pixel smartphones. Android Headlines reported that the targeted nature of the attacks mirrors tactics typically used by commercial surveillance vendors, who sell access to specialized spyware to governments and law enforcement agencies.
- To protect their devices, Pixel owners are advised to ensure their phones are running the latest September 2026 software version. The update, which was released on September 16, 2026, brought new features like Harry Potter themes and contact VIPs, but also included more than 200 security fixes under the hood. Android Police noted that the vulnerability was related to the modem inside Pixel phones and that the best thing Pixel owners can do is make sure their phones are running the latest security patch.
- While the exact number of affected Pixel models and users is not known, Google has confirmed that the vulnerability was exploited in limited and targeted attacks before the fix was released. The National Vulnerability Database, via TechCrunch, listed one of the vulnerabilities as related to the modem inside Pixel phones.
- For those unaware, the modem is one of the components responsible for cellular connectivity, allowing your phone to connect to mobile networks and access cellular data. Android Police also noted that we don't know which Pixel models were affected or exactly how many users were targeted, adding to the uncertainty surrounding the incident.
What's still developing
- What’s especially troubling about this flaw is that it’s “zero-click.” Traditional phishing attacks usually require you to tap a sketchy link or download an infected attachment.
- We’ve sifted through the internet to find deals on Google’s latest line of smartphones and found many trade-in deals you can take advantage of.