Apple at Work is exclusively provided by Mosyle. Mosyle is the only unified platform for Apple. It is the only solution that integrates all the necessary solutions to deploy, manage, and secure Apple devices in the workplace seamlessly and automatically on a single professional-level platform. Over 45,000 organizations trust Mosyle to make millions of Apple devices operational effortlessly and cost-effectively. Request your EMPOWERED TRIAL today and understand that Mosyle has everything you need to work with Apple.

If you spend enough time managing Apple devices in an enterprise environment, you start to see patterns in how security incidents occur. This is rarely a cinematic Ocean's 11-style hack. Instead, it often involves a user delaying their iOS update by three months or an employee connecting to an open Wi-Fi network at a hotel or café. Jamf recently published the Security 360 Annual Trends Report on Mobile Devices, and the data paints a very clear picture of the vulnerabilities that IT departments are currently facing. Even in the age of AI, the old is being updated again.

About Apple at Work: Bradley Chambers managed an enterprise IT network from 2009 to 2021. His experience with firewalls, switches, mobile device management systems, enterprise-level Wi-Fi, deploying and managing thousands of Macs and thousands of iPads will highlight how Apple IT administrators deploy Apple devices, how they set up the networks that support them, how they train users, stories from the front lines of IT management, and ways Apple can improve its products for IT departments.

Operating System Update Issue

As IT administrators, we are constantly thinking about, pushing, or nagging about updates. The report emphasizes why this is a significant responsibility. According to the data, 53% of organizations have at least one device with a critically outdated operating system. This means that more than half of the surveyed companies have unpatched, highly exploitable vulnerabilities in their employees' back pockets.

In 2025, we saw critical vulnerabilities like CVE-2025-31200, where processing an audio stream from a maliciously crafted media file could lead to code execution. It doesn't even require the user to click a link; simply previewing the audio message causes a memory corruption, putting the device at risk. If you are not forcing operating system updates through your device management platform, you are wide open to these advanced persistent threats.

Employees are trying to work while constantly receiving updates, which can be good for information security but a challenge for busy workers.

Jailbreak and Alternative Marketplaces

Apple's walled garden approach to the App Store has provided significant benefits for IT security since its launch. However, as the ecosystem changes, new risks emerge. The report found that 1 in every 850 business devices is jailbroken. When a device is jailbroken, it bypasses Apple's security restrictions and creates a backdoor that attackers can use to gain access to your system.

2% of organizations had devices using alternative application marketplaces. Power users may love the flexibility of sideloading, but this is a nightmare in terms of corporate data. Alternative stores are not subject to the same rigorous security and privacy requirements as the official App Store, significantly increasing the risk of malware entering your environment. Simple and clear: I believe the App Store is suitable for enterprise.

Network New Perimeter

Even with the tightest device configurations in the world, your data is still at risk the moment it leaves your corporate environment. The report states that 18% of organizations have users connecting to risky hotspots. Connecting to insecure public Wi-Fi exposes users to Man-in-the-Middle attacks, where hackers can intercept data in transit or steal session cookies.

In addition to network infrastructure risks, standard web risks are also extremely high. Surprisingly, 25% of organizations caused a user to fall for a phishing link. Productive AI has made it easier than ever for attackers to create convincing phishing messages that perfectly mimic services like Microsoft, Apple, and major financial institutions.

9to5Mac's View

The biggest lesson to be drawn from this data is that IT administrators cannot rely on end users to make the right security decisions. Users will connect to airport and hotel Wi-Fi. They will click on convincing phishing links. They will ignore software update prompts as long as macOS allows them to.

This reinforces that robust device management and security tools are a core security control, not just a tool to push configuration profiles. Forcing rapid security updates, managing who can access your data using tools like Tailscale and Kolide, and leveraging endpoint security to monitor device health are the only ways to proactively defend against an increasingly challenging mobile threat landscape each quarter.

Read the full report to learn more.

Apple at Work is exclusively provided by Mosyle. Mosyle is the only unified platform for Apple. It is the only solution that integrates all the necessary solutions to deploy, manage, and secure Apple devices in the workplace seamlessly and automatically on a single professional-level platform. Over 45,000 organizations trust Mosyle to make millions of Apple devices operational effortlessly and cost-effectively. Request your EMPOWERED TRIAL today and understand that Mosyle has everything you need to work with Apple.