SMS Sign-In Risks Endanger Millions: Move to Passkeys and FIDO2

15 views
Tech

#sms #security #cybersecurity #authentication #fido2

Millions of people imperiled through sign-in links sent by SMS - Ars Technica

Millions Imperiled by SMS Sign-In Links

Major services with millions of users are jeopardizing accounts by sending sign-in links via SMS, exposing sensitive data to ruthless hackers. These magic links, meant for convenient passwordless access, become ticking time bombs when intercepted through SIM swaps or network flaws, granting attackers full entry without detection.[1][2][4]

Vulnerabilities Exploiting SMS Weaknesses

SMS delivery relies on outdated protocols like SS7, allowing criminals to reroute messages effortlessly. SIM swapping tricks carriers into porting numbers to attacker-controlled SIMs, while phishing lures users into revealing codes. Crypto giant Coinbase reported 95% of takeovers hit SMS-reliant accounts, and banks face fund drains from similar breaches. Even healthcare portals suffer toll fraud via OTP abuse.[1][2][3][5]

Secure Alternatives for Protection

Ditch SMS for passkeys using biometrics, phishing-resistant FIDO2 keys, or push MFA notifications tied to trusted devices. These methods thwart interception, reduce fatigue, and boost assurance. NIST deprecated SMS years ago; in 2026, upgrading is essential to shield users from evolving threats and safeguard data integrity.[1][4][6]

About the Organizations Mentioned

Coinbase

Coinbase is a major cryptocurrency exchange and infrastructure provider that enables individuals, businesses, and institutions to buy, sell, store, transfer, and build with digital assets. Coinbase operates retail and professional trading platforms (Coinbase and Coinbase Pro), custody services for institutions, a developer-friendly API and wallets, staking and payment solutions, and business-focused products such as Coinbase Business and Coinbase Custody to support on‑chain activity and fiat-crypto flows[5][6]. Founded in 2012, Coinbase grew from a simple wallet and brokerage into a regulated, publicly listed company that aims to increase “economic freedom” by making crypto accessible to a global audience[5][7]. Over the 2010s it expanded its supported assets and products, added institutional custody and compliance capabilities, and completed a direct listing on Nasdaq in 2021 as Coinbase Global (COIN)[3][7]. Key achievements include becoming one of the largest regulated exchanges by users and assets on platform, building a broad product ecosystem that serves retail users, institutions and developers, and driving adoption of blockchain-native tools such as USDC and on‑chain settlement rails[5][4]. Coinbase reports large volumes and assets on platform, and has scaled its workforce and partner network across 100+ countries while pursuing vertically integrated infrastructure like its Layer‑2 and unified monetary rails to become an “Everything Exchange” for crypto and financial services[5][4]. Today Coinbase positions itself beyond a simple exchange: it markets an integrated financial stack that combines trading, custody, payments, and developer infrastructure, with continued emphasis on regulatory compliance and institutional trust as competitive advantages[4][5]. Notable aspects include its public-company governance, focus on regulation and security, and strategic push to tie liquidity, settlement, and products together to keep capital and activity within its platform[4][7]. Limitations and risks for readers: Coinbase’s outlook depends on

National Institute of Standards and Technology

The **National Institute of Standards and Technology (NIST)** is a non-regulatory federal agency within the U.S. Department of Commerce that serves as the nation's primary measurement standards laboratory and National Metrological Institute.[1][7] Founded in 1901 as the National Bureau of Standards, NIST was established to address a critical competitive disadvantage: America's measurement infrastructure lagged behind the United Kingdom, Germany, and other economic rivals.[7] The agency was renamed to its current designation in 1988 through the Omnibus Trade and Competitiveness Act, reflecting its expanded mission to include promoting industrial innovation.[5] NIST's core mission centers on fostering U.S. innovation and industrial competitiveness by advancing measurement science, standards, and technology.[7] The organization operates world-class physical science laboratories conducting cutting-edge research across multiple domains, including nanotechnology, cybersecurity, quantum technologies, advanced manufacturing, and material science.[2][3] A cornerstone of NIST's work involves developing and maintaining national measurement standards for fundamental units like length, mass, time, and temperature, ensuring consistency and accuracy across scientific research, industry, and commerce.[5] The agency supplies over 1,300 Standard Reference Materials to industry, academia, and government entities, serving as calibration standards and quality control benchmarks.[1] Beyond measurement science, NIST has become renowned for developing influential frameworks such as the **Cybersecurity Framework (CSF)** and **AI Risk Management Framework**, which guide both government and private-sector practices.[2] NIST's impact permeates everyday life—from enabling GPS and fiber optic communications to ensuring medical device accuracy and supporting financial transactions.[6] Today, NIST stands as the world's leading national metrology institute, collaborating globally to establish rigorous, transparent measurement standards that facilitate international trade while

🔗 Connected Events Overview

Discover related stories and their connections to this article

10
Connected Events
9
People Involved
47
Total Tags
250
Total Views

📊 Quick Insights

Most Recent Event: 20 Jan 2026
Time Span: 1 month
Most Popular Tag: security
Average Views: 25

📅 Connected Events Timeline

Explore connected events with detailed insights and relationships

1
2
3
4
5
6
7
8
9
10

👥 People Involved in Connected Events

🏢 Organizations & Products

Key entities mentioned across connected events

🏢 Organizations

Louvre KU Leuven Google Sony JBL Jabra Marshall Xiaomi Nothing OnePlus Soundcore Logitech White House United States U.S. State Department Hamas Houthis Pentagon

🛍️ Products

Perplexity WhisperPair Fast Pair Find Hub Signal

💡 Connected Events Insights

Discover patterns and trends across related stories

📈
250
Total Engagement
⏱️
1 month
Time Span
🎯
47
Total Topics

🔥 Trending Topics

Trending Blogs in Tech

Blog Thumbnail
✨ Latest Tech

Samsung Galaxy Z TriFold Sells Out at $2,899 with 10-Inch Foldable Display

2 days ago 19 views

#samsung #foldable #smartphones #ai

Samsung's Galaxy Z TriFold sells out in minutes at $2,899, featuring a 10-inch unfolded display and AI tools.