Rocket Host Access

Why Identity Remains Cybersecurity's Hottest TargetIf the last few weeks have demonstrated anything, it's that attackers increasingly prefer to target identities rather than infrastructure. Several recent cybersecurity developments highlight a common theme: compromising trusted user access is often easier and more effective than exploiting software vulnerabilities.Recent reports detailed ongoing social engineering campaigns targeting Microsoft Entra and other single sign-on (SSO) environments. Threat actors have been using voice phishing (vishing) and help desk manipulation tactics to gain access to identity platforms, then leveraging that access to reach business-critical applications and sensitive data. These incidents reinforce the growing importance of securing identity systems and the processes that support them.At the same time, security researchers disclosed several new attacks against passkey implementations. While passkeys remain significantly more secure than traditional pass

IntroCybersecurity isn’t always top of mind for mainframe users and IT teams, but the growing AI threat makes it clear that security can no longer be an afterthought. Ransomware Is Increasingly an Identity ProblemA new July 2026 ransomware study from Sophos found that nearly 80% of ransomware attacks now begin with an identity-based attack path, including compromised credentials, phishing, and malicious email campaigns. The findings reinforce a growing reality for security teams: attackers are increasingly succeeding not by exploiting software flaws, but by gaining access through legitimate accounts and trusted identities. For organizations focused on resilience, the message is clear—identity governance, MFA coverage, privileged access controls, and continuous monitoring have become just as important as traditional malware defenses.AI-Powered Attacks Move from Theory to RealityIn July, Hugging Face disclosed a security incident involving autonomous AI-driven activity that accessed inte

It's been a busy month in cybersecurity. High-profile incidents hit Fortinet, Klue, Oracle PeopleSoft, and others. While the specifics differ, there's a clear throughline – and it goes beyond "identity is important." The attack surface has shifted. Credentials are only one part of the picture now.When attackers don't break in – they log inIf June's security news felt unusually identity-heavy, that's because it was.Start with Fortinet. Researchers uncovered a publicly exposed directory containing over 86,600 sets of cleartext credentials and Kerberos hashes harvested from Fortigate firewalls. Once inside those perimeter devices, attackers used packet sniffing to harvest credentials across Active Directory environments – compromising internal accounts without direct internal access. CISA issued a hardening advisory on June 18.Then look at Klue. Threat group Icarus got in through a legacy credential tied to an abandoned integration project, harvested OAuth tokens Klue held on behalf of it

Mainframe security has long carried a reassuring reputation: stable, resilient, and secure by design. But the conversation has shifted. Today, the biggest risks aren't tied to the platform itself – they're tied to how users access it. Three themes are emerging with increasing urgency across the industry: uneven MFA adoption, modernization efforts centered on identity controls, and regulatory frameworks making strong authentication non-negotiable. Together, they reveal where mainframe security is heading – and where the gaps still remain.The MFA gap is becoming harder to ignoreOrganizations have made real progress on MFA adoption, but the finish line isn't in sight yet. Around 83% still rely on passwords for at least some systems, and a meaningful share of users remain without full MFA coverage. That gap has real consequences: stolen credentials now account for roughly 22% of breaches, making identity the single most common initial attack vector.For mainframe teams, this dynamic is fami

Host Access NewsWe’re already one quarter into 2026, and there have been so many developments in regards to AI. I have to imagine the majority of us are using AI tools on a daily basis. From OpenAI, to the coding power offered by Claude, to the potential security capabilities of the new Mythos, it’s exciting to see the power at our fingertips. Sadly, not everyone using these tools has the best intentions, and we’re already seeing very real cybersecurity threats powered by these tools.If it’s not already clear, you need to be thinking about how these AI tools impact the security of user access in your mainframe-based environment. Security by obscurity isn’t enough.But let’s look at some of those real-world scenarios that have already begun to play out.Claude tried to hack 30 companies – but no one asked it to.A cybersecurity firm recently took on the research task to answer the question: what if we asked Claude to research certain data that could only be retrieved via hacking? The resul

Host Access NewsWe’re inching closer to the end of 2025, and it’s been a busy year in cybersecurity. A new threat has emerged in the form of fake IT workers, with related charges brought against individuals in the United States. At the same time, state-sponsored and AI-powered attacks continue to grow. The need for in-depth defense is more critical than ever. Whether you’re mitigating the risk of the next potential attack or securing systems to comply with the latest regulations, it’s important to know where your blind spots are. New Rocket® Host Access Forum If you haven’t seen it yet, check out the new Rocket® Host Access Forum. We’ve moved all Rocket forums to a new domain to improve usability and functionality, and this is now the new home for our host access communities. You’ll find content across our terminal emulation and host connectivity solutions, including Rocket® Secure Host Access. You can browse product updates and thought leadership topics, ask questions, and connect wit

Are you using one of our terminal emulators to access your IBM i, IBM Z or other legacy system? We’ve just released an upgrade for every single Rocket customer. Host access is critical for any user, whether they are systems administrators, power users, or daily end users, who can access Rocket Terminal Emulator via a traditional desktop client, any modern browser, or via the Zowe open mainframe platform. Our latest solution, named Rocket Terminal Emulator v.10.1 (formerly known as Rocket BlueZone) has some significant new features: Enhanced customization and configuration – The web edition provides even more customization and configuration options to improve the efficiency of its users. It offers an intuitive experience as well as in-product tutorials and documentation, for the most easy-to-use terminal emulator. Watch @Tommy Hueber present the upgraded TE experience here. Support for local and network printing – Need to print from your mainframe to a local printer? Rocket Terminal Em