Observed Signal · Sep 17, 2026 · Security Update · Source: t3n · Impact: 1/5 · Sentiment: Negative
Google Pixel Zero-Click Modem Flaw Exploited, Update Released
Google has released the QPR1 update for Android 17 on Pixel smartphones, addressing a critical zero-click vulnerability in the mobile modem. Tracked as CVE-2026-58704, this flaw allows remote attackers to bypass access restrictions and gain elevated privileges without user interaction, and it is reportedly being actively exploited in targeted attacks against a small group of users. Technical details have been withheld by Google and the NVD to prevent further exploitation. Users are strongly urged to install the update immediately. Besides the security fix, the update introduces new features such as a VIP widget and enhanced notifications.
Security vulnerability in Google Pixel hardware; not directly related to AdTech/MarTech/AI industry.
Track Google Signals & Market Shifts in Real-Time
Polaris7 autonomous intelligence agents track regulatory filings, primary sources, executive changes, and deal flow 24/7. Create your free Explorer workspace to monitor these entities.
Key Takeaways & Evidence Grounding
- Google released QPR1 update for Android 17 for Pixel smartphones.
- The update fixes CVE-2026-58704, a zero-click vulnerability in the Pixel modem.
- The flaw allows remote attackers to bypass access restrictions and gain elevated privileges without user interaction.
- Exploitation is actively occurring but limited to a small group of users; technical details are withheld.
- The update also adds new features like a VIP widget and enhanced notifications.
Connected Companies & Entities
1 Entity mapped“Google has released a new update for its Pixel-Smartphones... Google has confirmed the security update....”
Ontology Mapping & Concepts
Related Market Signals & Shifts
Recent verified developments and strategic activity across this market segment.
Google issues emergency Chrome update patching zero-day
Google released an emergency Chrome update on June 11, 2026 that patches 74 security vulnerabilities, including 17 rated critical and an actively exploited zero‑day (CVE‑2026‑11645). The update moves Windows and Linux builds to version 149.0.7827.102 and macOS to 149.0.7827.103. The flaw stems from Chrome’s JavaScript engine and could allow attackers using crafted HTML pages to execute code in the browser sandbox, read out‑of‑bounds memory or crash the browser. Google is rolling the fix out regionally and is withholding detailed technical information until most users have updated. Users can trigger the update manually via Chrome’s menu → Help → About Google Chrome.
Microsoft Patches Critical Zero-Day Bugs Targeting Windows Users
Microsoft released security updates fixing multiple zero-day vulnerabilities in Windows and Office that the company says are being actively exploited by hackers. At least two flaws enable one-click attacks — tricking a user into clicking a malicious link — and another allows compromise via a malicious Office file. Microsoft identified one flaw as CVE-2026-21510 in the Windows shell, affecting all supported Windows versions and able to bypass SmartScreen; another is CVE-2026-21513 in the MSHTML engine used for backward compatibility. Microsoft acknowledged input from Google’s Threat Intelligence Group and said exploit details have been published. Independent reporting (Brian Krebs) notes additional zero-days were patched. Security experts warned the bugs permit remote malware installation and high‑privilege silent execution, increasing risk of system compromise and ransomware.
Apple fixes iOS 26 zero-click security flaws
Apple has patched two critical security vulnerabilities affecting iOS 26, iPadOS 26, and macOS 26. The first, CVE-2026-86950, is a graphics engine bug that may have been exploited in highly sophisticated attacks. The second, CVE-2026-86869, is a zero-click iMessage vulnerability that could bypass BlastDoor, discovered by Belgian firm ironPeak and Meta. Apple credited Meta's product security team and ironPeak's Niels Hofmans. Both vulnerabilities affect a large user base still on iOS 26, though iOS 27 devices are unaffected. Details remain limited, and it's unknown if the flaws were actively exploited.
Track Real-Time Market Signals & Shifts
Set up custom watchlists to receive automated, evidence-grounded executive digests whenever material signals or shifts occur across your tracked landscape.