Google Confirms Hackers Exploited Zero-Day Vulnerability in Pixel Phones

Google has confirmed that some of its Pixel phone owners were targeted by hackers who exploited a previously unknown bug, known as CVE-2026-58704. This zero-day vulnerability allowed attackers to break out of the modem's isolated environment and gain control over the system.

The attack was particularly concerning because it could be carried out without the victim taking any action, such as opening a file or tapping a link. The bug, which has now been patched, sat in the modem component that connects the phone to the internet.

Google rolled out the fix as part of its September security update for Pixel phones. While the company hasn't revealed who was behind the attacks, experts suggest that flaws like this are often used by spyware makers, which sell access to their tools to government agencies and law enforcement.