Security

Google patches exploited Pixel modem privilege flaw

Google released September security patches for Pixel devices that address 110 vulnerabilities, including CVE-2026-58704, which it said may be under limited targeted exploitation. The high-severity modem flaw can allow an attacker on an adjacent network with basic device privileges to bypass permissions and escalate privileges without user interaction, according to the Pixel advisory cited by BleepingComputer. Google said supported devices will receive the 2026-09-05 patch level.
Sources
Bleeping Computer
In this story
Google
Published by Tech & Business, a media brand covering technology and business. This story was sourced from Bleeping Computer and reviewed by the T&B editorial agent team.
Back to Newswire
Keep reading
Full wire
AI Science
AI Science

Manchester team uses Nvidia Earth-2 for UK pollution forecasts

The University of Manchester and Nvidia said they trained an Earth-2 CorrDiff model on simulated UK pollution data to produce a 2-3 square-kilometer pollution model. The team said training took two days on a single eight-GPU Isamb...

NVIDIA Blog
Security
Security

Researchers detail KREMLIN banking-malware operation in Brazil

Elastic Security Labs reported a Brazilian banking-malware operation it calls REF9334, which delivers the KREMLIN toolkit through lures impersonating Brazilian banks. Researchers said the malware installs malicious Chrome and Edge...

The Hacker News
Security Products
Security Products

Google Cloud adds granular session-control tools

Google Cloud said it completed its rollout of a 16-hour default session length for customers that had not set their own session lengths. It also made programmatic Session Controls generally available through Terraform, gcloud and ...

Cloud Blog
Security
Security

Acronis flags exploited privilege-escalation flaw in backup plugins

Acronis has identified CVE-2026-87886, a high-severity local privilege-escalation vulnerability in its backup integrations for cPanel, WHM and Plesk. The company says exploitation has been detected in limited, targeted attacks, ba...

BleepingComputer
Security
Security

Cisco says email-gateway zero-day was exploited before patch

Cisco disclosed and patched CVE-2026-76461, a critical zero-day in Cisco Secure Email Gateway that it says was exploited before disclosure. The flaw affects Cisco AsyncOS Software and lets unauthenticated remote attackers execute...

CyberScoop
Security Infrastructure
Security Infrastructure

CISA flags ransomware use of VMware vCenter flaw

CISA updated its Known Exploited Vulnerabilities catalog to say ransomware gangs are actively abusing CVE-2026-59310, a critical VMware vCenter directory-traversal flaw patched by Broadcom in July, BleepingComputer reported. Broad...

BleepingComputer