Google has recently confirmed evidence that spyware exploited a security vulnerability in the Pixel modem firmware to mount attacks. Because the attacks occurred before Google had fixed the flaw, this incident falls within the realm of a zero-day vulnerability. Moreover, the attackers employed a zero-click exploit. The CVE-2026-58704 Vulnerability In the changelog, Google notes that CVE-2026-58704 may have come under targeted, limited exploitation by attackers.

Google releases an emergency security update for Pixel devices to patch CVE-2026-58704, a high-severity modem vulnerability under active targeted...

Curate Feeds | Make Collections | Customize Email Briefs

A Google disponibilizou o boletim de segurança de setembro de 2026 para os seus telemóveis Pixel, corrigindo um total de 110 vulnerabilidades no sistema. Entre as falhas resolvidas destaca-se uma vulnerabilidade de dia zero (zero-day), identificada como CVE-2026-58704, que está a ser explorada em at

Google has disclosed that a high-severity security flaw in its Pixel Cellular Modem has come under exploitation in the wild. The vulnerability, tracked as CVE-2026-58704 (CVSS score: 8.0), is a privilege escalation flaw. "In Cellular Modem, there is a possible permission bypass due to a logic error in the code," according to a description of the bug in the NIST National Vulnerability Database

Die Pixel-Modem-Lücke CVE-2026-58704 wird bereits bei begrenzten, gezielten Angriffen ausgenutzt. Google hat den hoch eingestuften Fehler mit dem Pixel-Update vom September 2026 geschlossen; die US-Sicherheitsbehörde CISA führt ihn seit dem 16. September…