SMS SOS: CISA Urges Ditching Unencrypted Texts for Phishing-Proof MFA
Mobile users in the US should ditch unencrypted SMS and embrace phishing-resistant multifactor authentication, according to CISA. The advice comes amid cyber threats from groups like Salt Typhoon. Key recommendations include using encrypted apps like Signal and FIDO2-enabled options for MFA. Consider this your digital upgrade to stop phishing in its tracks!
Hot Take:
Looks like the unencrypted SMS just received a “Dear John” letter from CISA. It’s time for mobile users to break up with their old insecure habits and switch to a more reliable partner: phishing-resistant MFA. Sorry SMS, it’s not us, it’s you—plus a few Chinese hackers.
Key Points:
- CISA advises against using unencrypted SMS and suggests adopting encrypted messaging apps like Signal.
- Phishing-resistant MFA, such as FIDO2-enabled options, is recommended over SMS-based MFA.
- Gmail users should consider enrolling in Google’s Advanced Protection Program for enhanced security.
- Personal VPNs may not offer the security and privacy benefits users expect.
- Specific security settings are recommended for both iPhone and Android users.
Already a member? Log in here