A lack of authentication in Apple’s Device Enrollment Program could allow attackers to scoop up Wi-Fi passwords and VPN configurations.
Source: Threadpost