Patch Your Pixel Phone Pronto
Lest You Find Yourself In A 0-Click Pickle
If you’ve a Pixel in your pocket you had best head to Settings and check for an Android OS update ASAP. There is a 0-day out there that offers one of the worst features possible, a no click infection. Thanks to a logic error in the code present in the cell modem which can lead to a privilege escalation exploit which doesn’t require the owner of the Pixel to do anything. This is one where simply having an unpatched Pixel powered on and connected to the cell network makes you vulnerable to an invisible attack.
Google isn’t giving much in the way of details of the vulnerability which is common with 0-day, 0-click infections. If you’ve patched up to the 2026-09-05 update you are safe and sound … for now. This is in addition to the other Pixel phone vulnerabilities from earlier this month, one affecting Chromium’s V8 JavaScript engine and one is an RCE exploit that goes after an out-of-bounds write vulnerability.
Grab that patch lest you ruin your weekend.
Google disclosed the high-severity vulnerability, tracked as CVE-2026-58704, on Tuesday - and, at the time, warned the security hole “may be under limited, targeted exploitation.”
More Tech News From Around The Web
- Cisco warns of max severity ISE zero-day exploited in attacks @ Bleeping Computer
- AI coding agents’ 0-click RCE flaw could hand attackers keys to the kingdom @ The Register
- Fake LastPass Authenticator GitHub repos push new Rapuncel infostealer @ Bleeping Computer
- Gyazo server flaw exploited to steal 23.6 million user records @ Bleeping Computer
- FCC ISM Rules May Shatter Lora Mesh Communities @ Hackaday
- Fedora 45 beta drags the Linux console into the 21st century @ The Register
- Microsoft configuration change leaves SharePoint pages drawing a blank @ The Register
- ‘Zuckoff’ App Detects Meta Smartglasses, as Meta Plans Camera-Free Version, Loses Money, and Offers Social Media Subscriptions @ Slashdot
- Windows 11 24H2 Home and Pro reach end of support in October @ Bleeping Computer
- Inside the lab where the Arm AGI CPU is brought to life @ ServeTheHome
- Apple reportedly building server packed with M-series Ultra chips for AI @ Ars Technica
- Researchers used Claude to hack OpenAI @ Ars Technica
- Reconstructing A Pin On A Pin Grid Array Package @ Hackaday
- OpenAI Admits Six More Instances of AI Models Acting Deceptively @ Slashdot
- Zyxel NWA240BE BE15000 8-Stream Wi-Fi 7 Triple-Radio NebulaFlex Access Point Review @ NikKTech
