CISA says attackers are exploiting a zero-click Google Pixel flaw. Agencies got three days.
The Register reported on 16 September that CVE-2026-58704, a high-severity improper authorization flaw in the cellular modem of Pixel phones, "can bypass permission checks and escalate privileges with no user interaction…
The Register reported on 16 September that CVE-2026-58704, a high-severity improper authorization flaw in the cellular modem of Pixel phones, "can bypass permission checks and escalate privileges with no user interaction required".
Google disclosed the issue on Tuesday and warned it "may be under limited, targeted exploitation". The company released the fix in its September 2026 security bulletin and declined to give The Register more detail on scope.
On Wednesday CISA added the flaw to its Known Exploited Vulnerabilities catalog. Federal agencies had three days, with a patch deadline of 19 September. CISA said: "This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise."
The Register notes that zero-click attacks like this are frequently used by commercial spyware makers to watch targeted individuals.
How many days does your mobile device management give a critical phone update before it is forced?
Sources
Our file on Google
- 4 Nov
Microsoft and Google are not in the school platform six German states agreed to buy. Nextcloud supplies the software.
- 29 Oct
Google Cloud's sales doubled to $30.7 billion in a quarter. Alphabet's profit still fell to $26.2 billion from $35 billion.
- 27 Oct
Microsoft rushed out a .NET security fix on Sunday. Google's Brotli code was patched in February, but no one saw the danger.
- 26 Oct
Google built an engine for waiting AI agents. Customer preview comes later.
- 22 Oct
Google Cloud lost one London zone. HSBC users reported problems.
Every story here is open to read. The ERP LEADERS brief goes one step further.
The day in enterprise software, in one email: the stories that matter, the failures with their figures, one case taken apart. Read a sample or sign up for the brief.
Welcome back. · Issue 01
