Microsoft warns against SMS, voice calls for multi-factor authentication

While Microsoft urged users to employ MFA, it also warned against relying on SMS messages or voice calls to handle one-time passcodes (OTPs) because phone-based protocols are fundamentally insecure.