Microsoft is retiring phishable SMS and voice-based multifactor authentication in Microsoft Entra ID, replacing them with passkeys as the default sign-in method starting September 1, 2026. The move responds to a surge in AI-enabled phishing campaigns that Microsoft Threat Intelligence has observed...