CISA pushes guide for high-value targets to secure mobile devices

CISA published comprehensive mobile-communications hardening guidance in response to the Salt Typhoon telecom breach attributed to a Chinese-linked espionage group that targeted high-value government and campaign officials; recommendations include using end-to-end encrypted messaging (e.g., Signal), adopting FIDO hardware-based authentication instead of SMS MFA, using password managers, enforcing software updates and SIM PINs to mitigate SIM-swapping, and platform-specific measures such as iPhone Lockdown Mode/iCloud Private Relay and selecting Android devices with strong update commitments and encrypted RCS.