Google says some Pixel phone owners were hacked in zero-day attacks

Google disclosed and patched CVE-2026-58704, a Pixel modem bug that could be exploited in silent zero-click attacks to escalate privileges beyond the modem and access broader phone data; Google reported limited, targeted exploitation and did not attribute the activity, while noting such bugs are often abused by surveillance spyware vendors.