The Immortal Retrofuturism of Mainframe Computers and How to Keep Them Safe

Mainframes still carry a large share of banking, retail, healthcare, government and transportation workloads, handling enormous transaction volumes with very high uptime. The talk traces their history from early military and census-era machines through unified architecture and virtual memory, and pushes back on the myths that they are outdated or easily replaced by the cloud.

The speaker, a penetration tester who focuses on mainframe engagements, explains how integrations widen the attack surface. Past breaches were described where attackers got in through a wireless network, a web application, or an exposed FTP connection with default settings, then pivoted into mainframe data. A live demo showed a low-privilege user reaching a command shell, failing to read a stored private key, and then retrieving that same file without authentication by altering a request sent to a web endpoint. Common findings across engagements include broken access control, injection flaws, default credentials and weak password policies.

Recommended defenses treat the whole topology as one system, using network controls, logical partitions and an external security manager. Other advice includes blocking unencrypted protocols, applying hardening benchmarks, monitoring logs, auditing identity and access, enforcing MFA and running recurring testing. The takeaway is that mainframes are staying in service for decades, so the systems connected to them need the same scrutiny.