Some Pixel Phones Were Hacked With No Clicks — Here's the Fix

Google says hackers broke into some Pixel phones using a software bug. The attacks were limited and targeted. The bug, called CVE-2026-58704, is now fixed. Details appeared in September Pixel security materials and were reported on Sept. 16. TechCrunch

The bug was in the modem, the part of the phone that talks to the cell network. An attacker could use it to break out of a restricted area around the modem and reach data on the rest of the phone. No tap, click, or download was needed. The attack could happen silently.

The fix is in the Pixel Update Bulletin for September 2026. That bulletin is posted at the Android source site and lists security fixes and functional improvements for supported Pixel phones. Pixel Update Bulletin A separate Android Security Bulletin for September 2026 lists security fixes affecting Android phones more broadly. Android Security Bulletin

Google did not say who carried out the attacks. It described the activity as limited and targeted, without naming a specific attacker or group of victims.

The broader context here is why a modem bug gets special attention. The modem must handle incoming radio signals, which cannot be trusted. It is kept separate from the main part of the phone that runs apps, like a side room with a locked door. Breaking out of that room turns a problem in one small part into access to phone data.

Looking at what this means in practice, this was not phishing or a bad link where careful habits help. Installing the September update quickly is the protection. For workplaces with Pixel phones, checking that phones have the September update is the key step, with extra care for phones that travel, handle sensitive calls, or are not centrally managed.

In my view, that silent pattern also supports saving modem crash logs and radio records where rules allow, since there is little trace left on the phone to review later.

Worth flagging for longer-term planning, modem bugs are often hard for normal phone security tools to see. Those tools tend to see the later damage, not the first modem fault. That makes vendor notices and carrier-delivered updates the main safety net. The encouraging part is that the normal process worked here. The attack was acknowledged, given a number, and fixed through established channels.