BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.com//hack-lu-2026//speaker//EZJN3P
BEGIN:VTIMEZONE
TZID:Europe/Luxembourg
BEGIN:DAYLIGHT
DTSTART:20251022T000000
TZNAME:CEST
TZOFFSETFROM:+0200
TZOFFSETTO:+0200
END:DAYLIGHT
BEGIN:STANDARD
DTSTART:20251026T030000
RDATE:20261025T030000
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20260329T030000
RDATE:20270328T030000
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
SUMMARY:Six Degrees of RACF SPECIAL - Mainframe Attack Paths - Jonathan Pr
 ince
DTSTART;TZID=Europe/Luxembourg:20261022T141500
DTEND;TZID=Europe/Luxembourg:20261022T144500
DTSTAMP:20261009T050131Z
UID:pretalx-hack-lu-2026-M9YUZX@pretalx.com
DESCRIPTION:Enterprise identity security has been transformed by graph-bas
 ed attack path modeling. BloodHound changed how attackers and defenders th
 ink about Active Directory\, revealing privilege escalation paths that sta
 tic access reviews consistently missed. That shift never reached the mainf
 rame.\nRACF\, IBM's security subsystem for z/OS\, controls access to some 
 of the most sensitive workloads in existence such as core banking\, paymen
 t processing\, government records\, and insurance systems. Yet mainframe a
 uthorization is still primarily analyzed through flat reports and manual a
 ccess list reviews\, approaches that are blind to multi-step privilege esc
 alation across users\, groups\, datasets\, surrogate permissions\, and sys
 tem authorities.\nRACFHound applies attack path modeling to RACF by transf
 orming authorization data into an identity graph and integrating it into B
 loodHound via the OpenGraph framework. This talk demonstrates how privileg
 e escalation paths through RACF can be systematically discovered using the
  same techniques now standard in Active Directory security. The mainframe 
 becomes a first-class citizen in modern identity security analysis\, and t
 he attack paths hiding in plain sight in every large enterprise finally be
 come visible.
LOCATION:Europe
URL:https://pretalx.com/hack-lu-2026/talk/M9YUZX/
END:VEVENT
END:VCALENDAR