Google Confirms Pixel Zero-Day Attacks

Google has confirmed that attackers exploited a previously unknown Pixel modem vulnerability in targeted attacks before the flaw was patched.

What happened

The vulnerability, tracked as CVE-2026-58704, affected Pixel devices and could be exploited silently without requiring a user to open a malicious link or install software.

The flaw was serious because it could potentially allow an attacker to escape the modem sandbox and reach broader device data.

Google has issued a patch.

Why it matters

Zero-click vulnerabilities are among the most valuable tools used in sophisticated mobile attacks because victims do not need to make a mistake.

Modem vulnerabilities are especially sensitive because they sit below many of the security controls users normally interact with.

The bigger picture

Mobile operating systems have become significantly harder to compromise through conventional applications, pushing advanced attackers toward lower-level components such as basebands, drivers and firmware.

The incident reinforces why mobile security increasingly depends on defending the full hardware and software stack rather than only the operating system interface.