This is an intriguing draft document by NIST concerning SMS and two-factor authentication.  This is a commonly used technique for many two-factor providers so conversion to more secure methods may take time.  This is certainly not a finalized recommendation and adoption will take time if it moves forward.

https://threatpost.com/nist-recommends-sms-two-factor-authentication-deprecation/119507/