Observed Signal · Aug 13, 2026 · Policy Update · Source: t3n · Impact: 4/5 · Sentiment: Positive
Identity Market: Microsoft warns against SMS-based 2FA over AI phishing
Microsoft has warned IT administrators that SMS- and voice-based two-factor authentication (2FA) are increasingly vulnerable due to AI-assisted phishing and easier SIM-swapping. In an internal email, the company recommended migrating to phishing-resistant methods such as passkeys. Microsoft said it has observed a strong rise in AI-driven attacks with higher click-through rates that aim to capture passwords and MFA codes. As a consequence, Microsoft will disable SMS- and voice-based authentication for Entra ID accounts starting February 1, 2027; a timeline for personal Microsoft accounts has not yet been announced.
Policy update from a major platform (Microsoft) that changes authentication methods for enterprise Entra ID users and pushes adoption of phishing-resistant identity solutions, affecting identity management and security strategies across organizations.
Wichtigste Kernpunkte & Evidenz
- Microsoft warned IT administrators by email to stop using SMS- or voice-based two-factor authentication due to AI-enabled phishing risks.
- Microsoft observed a strong increase in AI-driven attacks that aim to collect passwords and MFA codes and report higher click rates than pre-AI attacks.
- Microsoft recommended switching to phishing-resistant methods such as passkeys.
- From February 1, 2027, Entra ID users will no longer be able to access accounts using SMS- or voice-based authentication.
- Microsoft stated that SMS and voice authentication are among the most vulnerable available authentication methods, weaker than passkeys against phishing, SIM-swapping and replay attacks.
Verknüpfte Unternehmen
4 verknüpfte UnternehmenTargetVideo
TargetVideo ist eine Publisher-Videoplattform und ein Vermarktungsunternehmen für Premium-Video-Advertising.
“The article notes external content from TargetVideo GmbH that complements t3n's editorial offering....”
Windows Latest
Auf Microsoft spezialisierter Technologie-News-Publisher und Zielgruppen-Plattform.
“Microsoft's email was obtained by Windows Latest, which the article cites as having the email....”
t3n
Führende deutsche Digital-Business- und Tech-Plattform, die B2B-Reichweite durch Premium-Subscriptions, First-Party-Data-Monetarisierung und hochgradig zielgerichtete Media-Sales-Lösungen in der DACH-Region wertschöpft.
“Article published on t3n (t3n – digital pioneers)....”
Microsoft
Ein diversifiziertes Plattformunternehmen für Software, Cloud-Infrastruktur, digitale Werbung und Gaming.
“Microsoft warned strongly against two-factor authentication via SMS and urged administrators to move to passkeys in an internal email....”
Ontology Mapping & Concepts
Track Real-Time Market Signals & Shifts
Set up custom watchlists to receive automated, evidence-grounded executive digests whenever material signals or shifts occur across your tracked landscape.