Your encrypted messages are now under threat. Not only does new commercial spyware put your private content at risk, it can also compromise your phone, providing attackers with access to everything — the keys to your digital life.
Following its joint warning with the FBI, the U.S. federal agency responsible for cyber defense has just issued revised advice for iPhone and Android users. This includes a warning to “only use end-to-end encrypted communications.”
While CISA says new spyware attacks target Signal and WhatsApp, its core warning remains the same. Do not use text messaging between iPhones and Androids — it’s not fully encrypted. The latest RCS protocol does add end-to-end encryption which is in test with Google, but Apple is notably silent on when this will come to iPhone.
iPhone users are more likely to use iMessage than Android users are likely to use RCS. That’s why Mark Zuckerberg, whose Meta owns WhatsApp and facebook Messenger has consistently called out iMessage as the core competitor, especially in the U.S.
And so CISA has some specific advice for Apple’s iPhone users: “Disable the ‘Send as Text Message’ setting to ensure messages do not send as SMS if iMessage is unavailable. iMessage offers end-to-end encryption between Apple users.” As CISA explains, you can do this by navigating to Settings > Apps > Messages.
It’s now certain we will begin 2026 without any form of encrypted stock messaging between iPhone and Android users. This despite the FBI and CISA issuing a viral warning in December 2024 for all smartphone users to turn to over-the-top platforms instead, as Chinese hackers marauded through U.S. networks.
This really does need fixing next year.
My advice has not changed. WhatsApp remains the best option for day-to-day messaging, despite regular warnings that metadata is being tracked. For more sensitive messaging, use Signal. And if you’re an iPhone users, then the uber-secure messenger’s new confirmation that a new cloud backup is coming to iOS is a game-changer.
