Google says some Pixel phone owners were hacked in zero-day attacks

Google disclosed that a zero-day in Pixel phone modem software (CVE-2026-58704) was actively exploited in limited, targeted attacks, enabling silent zero-click privilege escalation before being patched. For CIOs and technology leaders, this underscores that mobile devices are now high-value enterprise attack surfaces, especially for executives and employees handling sensitive data, and that IT organizations need faster patch enforcement, stronger mobile device management, and closer monitoring for advanced spyware-style threats.