The US Cybersecurity and Infrastructure Security Agency (CISA), issued recommendations on securing Internet of things (IoT) devices, preventing and responding to identity theft, and avoiding phishing attacks. The agency also published a reminder about the steps that consumers need to take to secure IoT devices: using multi-factor authentication; choosing strong passwords, evaluating security settings, and updating software.