MDM The Blindspot You Didn't Know

June 2, 2022

The Internet accessible single-factor attack surface is decreasing with the increased implementation of multi-factor. However, configuration of multi-factor authentication does not always remove the presence of the single-factor attack surface. Security research, conducted by Matt Burch, of VMWare's AirWatch and Ivanti's MobileIron authentication functionality, has resulted in three MITRE recognized CVEs. In this talk, Matt will discuss the Mobile Device Management (MDM) design flaws enabling account enumeration and single-factor authentication.