CERT-FR recommends completely deactivate Wi-Fi whenever it’s not in use

According to CERT-FR, the French Computer Emergency Response Team, iPhone and Android users should fully disable Wi‑Fi to reduce exposure to multiple vulnerabilities across wireless interfaces, apps, operating systems and even hardware. The advisory reinforces basic digital hygiene, advising users to install apps only from official stores, review permissions, keep devices updated and rebooted, and to use a VPN on public Wi‑Fi while disabling auto‑join on open networks.

The report notes that mobile devices handle vast amounts of data and features, creating a broad attack surface across wireless interfaces such as Wi‑Fi, Bluetooth, NFC and cellular networks, with weaknesses that can enable data interception or spyware deployment. It also highlights the existence of zero‑click exploits and points to activity by state‑sponsored actors and PSOAs as escalating threats.

The CERT‑FR guidance includes concrete recommendations on Wi‑Fi usage, including turning off Wi‑Fi when not in use and avoiding public networks unless necessary. France and the UK launched the Pall Mall Process in late 2023 to curb misuse of commercial cyber intrusion tools, promoting cooperation and threat sharing.