Approach to mainframe penetration testing on z/OS


Information technology is developing at a rapid pace, with completely new areas emerging, such as DevOps and DevSecOps – and we’re striving to keep up. However, in some projects, you may encounter systems built on rather outdated principles. Such systems must be approached with care, since a single mistake can lead to data loss and malfunctions. To some extent, this is true for today’s systems too, but for systems with a rich history, the risks are significantly higher.

Mainframes are just such an example of old architecture. These software-hardware solutions rely on principles developed in the 1960s. However, they’re still in use today, for example, to simultaneously process a large number of transactions, perform complex computing operations, and so on.

Read more…
Source: Kaspersky


Sign up for our Newsletter


Related:

  • Over 29 million secrets were leaked on GitHub in 2025, and AI really isn’t helping

    March 18, 2026

    Vibe-coding may seem great for quickly shipping products, but inexperienced developers are leaving gaping cybersecurity holes that are causing breaches and exposures left and right. This is according to GitGuardian’s latest report, the “State of Secrets Sprawl” paper that was just released. In the research document, the organization said 2025 was the year when AI adoption ...

  • Unpacking a new Horabot campaign in Mexico

    March 18, 2026

    In this instalment of Kaspersky SOC Files series, Kaspersky researchers will walk you through a targeted campaign that our MDR team identified and hunted down a few months ago. It involves a threat known as Horabot, a bundle consisting of an infamous banking Trojan, an email spreader, and a notably complex attack chain. Although previous research ...

  • Apple patches WebKit bug that could let sites access your data

    March 18, 2026

    WebKit vulnerabilities refer to security flaws in Apple’s web rendering engine, which powers Safari, Mail, and the App Store on iOS and macOS. What this means is that the CVE-2026-20643 vulnerability makes it possible for a malicious website to pretend to be another site, maybe one you trust, and then read or steal information that should ...

  • Notorious online data leak market BreachForums taken down by whitehat heroes

    March 17, 2026

    BreachForums, one of the most popular underground forums for sharing malware, stolen data, and more – was taken down. Now, the admin seems to be giving up and looking for someone to pass the torch to. Over the weekend, the Cyber Counter-Intelligence Threat Investigation Consortium (CCITIC) posted on LinkedIn, saying that both the clearnet and Tor ...

  • Fortinet patches FortiGate Firewall vulnerabilities that allowed hackers to steal enterprise credentials

    March 16, 2026

    At the start of the year, cybercriminals were exploiting three vulnerabilities in FortiGate Next-Generation Firewalls (NGFW) to establish persistence and move laterally throughout the network. All recorded attacks were stopped before they could do any meaningful harm, and FortiGate has since issued patches to mitigate the risk. Between December 2025 and February 2026, security researchers SentinelOne ...

  • EU sanctions Chinese and Iranian companies for cyber attacks

    March 16, 2026

    The European Union on Monday imposed sanctions against ‌two China-based and one Iranian ‌company for cyber attacks against EU member ​states. The EU listed China-based Integrity Technology Group and Anxun Information Technology, and Iranian company Emennet Pasargad. Integrity Technology ‌is seen ⁠to have enabled hacks of over65,000 devices across six member ⁠states, according to an EUstatement. ...