Google Pixel phones are being hit by zero-click attacks, according to The Register. The exploits compromise devices without any action from the user, and the US Cybersecurity and Infrastructure Security Agency (CISA) has responded with an urgent patch directive.

Federal agencies have been given just three days to apply fixes, an unusually tight deadline that reflects the severity of the threat. The Register notes that the attacks are already being used against Pixel handsets, though the full technical details of the exploit chain have not been disclosed in the report.

The incident highlights the risk of zero-click vulnerabilities, which leave users with little opportunity to defend themselves. Pixel owners should watch for security updates and apply them as soon as they become available.