Standards body warned SMS 2FA is insecure and nobody listened

Duo Security says NIST's advice to deprecate out-of-band passwords has been ignored

The US National Institute of Standards and Technology's (NIST's) advice that SMS is a poor way to deliver two factor authentication is having little impact, according to Duo Security."