---
id: 7732
title: "Unix Underworld: Tales from the Dark Side of z/OS"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/executive-blog/mainframe-penetration-testing/unix-underworld-tales-from-the-dark-side-of-z-os/"
published_at: "2025-08-10T00:00:00Z"
tags: ["black-hat", "def-con", "privilege-escalation", "unix", "mainframe", "zos", "apf"]
phying_url: "https://phying.com/item/7732"
lang: en
---

# Unix Underworld: Tales from the Dark Side of z/OS

## Summary

NetSPI's Black Hat and DEF CON research shows z/OS Unix is an overlooked mainframe attack surface, with paths from authenticated user to APF-authorized code execution and UID 0.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2025-08-10T00:00:00Z
- **Original:** https://www.netspi.com/blog/executive-blog/mainframe-penetration-testing/unix-underworld-tales-from-the-dark-side-of-z-os/
- **Phying News:** https://phying.com/item/7732