AppleFleet Device Management API Flaw Allows Host Impersonation and MDM Hijacking
An authentication bypass in Fleet device APIs allows unauthenticated remote attackers to impersonate enrolled Apple devices and trigger MDM actions.
Topic
2 articles
CyberSecureToday covers Endpoint Security across 2 articles published between 21 Sep 2026 and 1 Oct 2026.
The coverage includes 2 vulnerability advisories. 2 advisories are rated critical or high severity.
Stories on Endpoint Security most often intersect with Fleet, MDM and Authentication Bypass, with Technology, Cloud & SaaS the most affected sector. The most recent story, “Fleet Device Management API Flaw Allows Host Impersonation and MDM Hijacking”, was published 1 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.
AppleAn authentication bypass in Fleet device APIs allows unauthenticated remote attackers to impersonate enrolled Apple devices and trigger MDM actions.
Threat IntelSecuronix uncovers TASK#STOMP campaign leveraging Living-off-the-Land VBScript stagers, masqueraded Scheduled Tasks, and resilient dual-PowerShell backdoors.