Apple’s Device Enrollment Program susceptible to data leakage via serial number brute-forcing

Duo Security researchers have discovered that Device Enrollment Program profiles for Apple devices can be retrieved using only the serial number via an undocumented and non-rate-limited API. Read more…
Neowin