Microsoft Ditches SMS-Based 2FA Because It's Too Easy to Hack
… For years, Microsoft's security leadership has warned that SMS and voice-based 2FA are among the weakest authentication methods. Criminals can abuse SIM-swap scams, intercept messages on a phone's network, or use social engineering to trick users into entering one-time codes on phishing sites. …