Workspace ONE is VMware's enterprise platform for digital workspace management, integrating identity, app delivery, and Unified Endpoint Management (UEM) to manage devices and applications across multiple platforms.
Overview
Workspace ONE is VMware's enterprise platform for digital workspace management, integrating identity, app delivery, and Unified Endpoint Management (UEM) to manage devices and applications across multiple platforms. Its MDM capabilities enable centralized control of enrolled endpoints, which can be a double-edged sword in security if misused. The Airstalk incident illustrates how legitimate MDM tooling can be repurposed to create covert spy channels, highlighting a significant risk vector for organizations relying on Workspace ONE for device management.
Related Threat Clusters
-
Active Exploitation of Vulnerabilities in Ivanti and SolarWinds Products
The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding active exploitation of vulnerabilities in Ivanti Endpoint Manager, SolarWinds Web Help Desk, and VMware Workspace ONE. The…
12 articles · Updated March 10, 2026 -
Airstalk Malware Exploits MDM Tools in Supply Chain Attacks
Palo Alto Networks’ Unit 42 has identified a new malware campaign named Airstalk, linked to a suspected nation-state actor. This malware targets mobile device management tools, specifically leveraging the AirWatch API…
2 articles · Updated November 3, 2025 -
Forrester Retires Endpoint Security Wave Amid Evolving Cybersecurity Landscape
Forrester has announced the retirement of its Endpoint Security Wave report series in 2026, citing the convergence of Endpoint Protection Platforms (EPP) and Endpoint Detection and Response (EDR) solutions. This…
25 articles · Updated April 30, 2026
Recent Intelligence Reports
- Mordor Intelligence to be worth US$8.85 billion ($12.7 billion) in 2026, rising sharply to US$27.83 billion ($39.94 billion) in 2031 — www.mordorintelligence.com · April 30, 2026
- U.S. CISA adds Ivanti EPM, SolarWinds, and Omnissa Workspace One flaws to its Known ... — Securityaffairs · March 10, 2026
- Attack warning for Ivanti Endpoint Manager, SolarWinds Web Help Desk and more — Heise.De · March 10, 2026
- Airstalk Malware Turns MDM Tools into Covert Spy Channels — Esecurityplanet · November 3, 2025