{
  "id": 7852524,
  "title": "Google Pixel phones pwned in zero-click attacks",
  "url": "https://urgent.news/2026/09/16/google-pixel-phones-pwned-in-zero-click-attacks-7852524",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-09-16T17:56:31.000Z",
  "source": {
    "name": "The Register",
    "slug": "the-register",
    "url": "https://www.theregister.com/security/2026/09/16/google-pixel-phones-pwned-in-zero-click-attacks/5296936"
  },
  "original_language": "en",
  "account": "Google Pixel smartphones have been found vulnerable to zero-click attacks due to an improper authorization bug in their cellular modems. This flaw, officially cataloged as CVE-2026-58704, allows attackers to bypass permission checks and escalate privileges without any user interaction. The vulnerability was disclosed by Google on Tuesday, with the company warning that it may have already been exploited. The Register attempted to obtain further details from Google, but received limited information. The National Institute of Standards and Technology (NIST) has also added this vulnerability to its Known Exploited Vulnerabilities Catalog (KEV), urging agencies to patch the issue within three days. Zero-click attacks, which exploit such flaws, are commonly used by commercial spyware developers to surveil targeted individuals.",
  "summary": "CISA gives federal agencies just 3 days to patch",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 3,
    "also_reported_by": [
      {
        "outlet": "The Register Science",
        "title": "Google Pixel phones pwned in zero-click attacks",
        "url": "https://urgent.news/2026/09/16/google-pixel-phones-pwned-in-zero-click-attacks",
        "published": "2026-09-16T17:56:31.000Z"
      },
      {
        "outlet": "9to5Google",
        "title": "Google rolling out Android 17 QPR2 Beta 5 for Pixel",
        "url": "https://urgent.news/2026/09/16/google-rolling-out-android-17-qpr2-beta-5-for-pixel",
        "published": "2026-09-16T20:54:18.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}