From TechCrunch · Zack Whittaker · · 1m 10s
Google Pixel phones hacked in zero-day attacks
A bug in Pixel modems let attackers silently access phone data in targeted cyberattacks.
In brief
A bug in Pixel modems let attackers silently access phone data in targeted cyberattacks. A zero-click modem bug in Pixel phones allowed attackers to access data without any user interaction, likely exploited by spyware vendors. Originally reported by TechCrunch.
Pixel owners hit by targeted hacks
Google says a bug in Pixel smartphones was exploited in limited and targeted cyberattacks. The bug, CVE-2026-58704, has now been patched.
The bug lived in the modem
The vulnerability was found in Pixel phones' modem, which connects the device to the internet. It allowed attackers to escape the modem and access broader phone data.
No user interaction required
The bug could be exploited silently without any interaction from the phone owner in a zero-click attack. Victims didn't need to click a link or open a file.
Google won't say who did it
Google did not reveal who was exploiting the bug. A company spokesperson did not return a request for comment.
Likely work of spyware vendors
Bugs like this are often abused by surveillance vendors and spyware makers who sell data-stealing software to governments and law enforcement.
“It's not uncommon for bugs like this one to be abused by surveillance vendors, such as spyware makers”
In short
A zero-click modem bug in Pixel phones allowed attackers to access data without any user interaction, likely exploited by spyware vendors.
