•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Convenience often comes at a high price in security. Many digital services have shifted to sign-in links delivered via SMS: users enter a phone number, receive a text message, click the link, and gain access to their account. Researchers warn that this simplicity creates a major vulnerability when attackers obtain the link.
In analysis cited by TechRadar, researchers examined more than 33 million SMS messages and found that at least 177 digital services expose users to risk. The affected services span categories including insurance platforms, job postings, and personalized-recommendation systems.
The core issue is that these authentication systems treat “owning the link” as equivalent to “owning the account,” without additional verification. If a third party obtains the link, they can access personal data without needing a password.
Despite advances such as biometrics and hardware security keys, SMS is still common because it is broadly compatible. However, the SMS protocol is not end-to-end encrypted, meaning message data can pass through carrier networks and may be stored in insecure databases.
The risk is amplified by real-world incidents involving leaked SMS storage databases, which can expose login links that remain valid for extended periods.
Additional threats include SIM swapping and ongoing vulnerabilities related to SS7. If an attacker temporarily gains control of a victim’s phone number, they can request SMS login links and compromise multiple linked accounts.
Premium gym chains are entering a “golden era” that is ending or already in decline, as rising operating costs collide with shifting consumer preferences toward more flexible, community-based ways to exercise. Long-term memberships are shrinking, margins are pressured by higher rents and facility expenses, and competition from smaller, more personalized…
