Google Addresses Pixel Security Breach After Targeted Hacks

WHO:

TechCrunch - Google is the company addressing the security breach affecting Pixel phone owners.

The Hacker News - The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is involved in cataloging the vulnerability.

WHAT:

TechCrunch - Google reported that some Pixel phone owners were hacked in zero-day attacks.

The Hacker News - Google disclosed a high-severity security flaw in its Pixel Cellular Modem, tracked as CVE-2026-58704, with a CVSS score of 8.0.

The Hacker News - Google addressed 110 security flaws in the latest Pixel updates for September 2026, including 88 privilege escalation vulnerabilities.

The Hacker News - The vulnerability CVE-2026-58704 allows for remote escalation of privilege without user interaction.

WHERE:

The Hacker News - The vulnerability affects Google Pixel devices.

WHEN:

The Hacker News - Google issued an advisory on a Tuesday regarding the vulnerability.

The Hacker News - CISA added CVE-2026-58704 to its Known Exploited Vulnerabilities catalog on September 16, 2026.

The Hacker News - Federal Civilian Executive Branch agencies are required to apply fixes by September 19, 2026.

WHY:

The Hacker News - The vulnerability is due to a logic error in the code that allows for a permission bypass.

HOW:

The Hacker News - The vulnerability can be exploited as part of a zero-click attack, meaning it does not require any interaction from the Pixel device owner to trigger the exploit.

(UPDATED September 16, 2026 19:06 UTC)

Google is addressing a significant security breach affecting Pixel phone owners, as some users have been hacked in zero-day attacks linked to a high-severity flaw in the Pixel Cellular Modem, tracked as CVE-2026-58704, which has a CVSS score of 8.0. The U.S. Cybersecurity and Infrastructure Security Agency is cataloging this vulnerability, which allows for remote escalation of privilege without any user interaction, and has been added to its Known Exploited Vulnerabilities catalog. Federal Civilian Executive Branch agencies are required to apply necessary fixes by September 19, 2026, following Google's advisory that detailed 110 security flaws addressed in the latest updates.