News

From my vantage point, I see the legacy mainframe landscape as both a testament to decades of reliable operation and a critical juncture demanding strategic evolution. The global economy’s reliance on these systems is undeniable – they are the silent workhorses powering a significant majority of business transactions.

However, the accelerating pace of technological advancement, coupled with the realities of hardware lifecycles and a shifting talent pool, calls for a proactive and thoughtful approach to their eventual end-of-life. The question is no longer if we modernize, but how we navigate this complexity without disrupting the very core of operations.

A primary hurdle is the significant cost and inherent complexity of these transformations. Mainframe modernization isn't a simple tech refresh; it demands substantial investment, time, and meticulous planning. Decades of accumulated technical debt, often manifested as undocumented code and intricate dependencies, require a phased and strategic approach.

Carving the application portfolio into thin, business-aligned slices, is a great approach to deliver tangible value in shorter cycles. Prioritizing initiatives with clear and early ROI, such as migrating non-critical workloads, builds momentum and stakeholder confidence.

The shrinking pool of mainframe-skilled professionals presents another critical challenge. The reality is that the workforce with deep expertise in these legacy systems is nearing retirement, creating a potential knowledge vacuum. To mitigate this, we advise for codification of tribal knowledge.

This involves leveraging tools to harvest specifications from production logs and source code analytics, while also pairing retiring experts with cross-skilled engineers. Investing in upskilling programs that bridge the gap between COBOL literacy, modern cloud-native and observability skills is paramount to building a future-ready workforce capable of managing both legacy and target environments during transition.

Migrating petabytes of critical, often poorly documented, business data and its embedded logic to modern platforms is a high-stakes challenge, with severe risks of data loss or corruption. A recommended strategy involves inverting data gravity: implement an API façade over shared datasets and incrementally replicate data to the target platform using event streaming, thereby minimizing disruption.

Employing anti-corruption layers ensures a clean decoupling of legacy systems, aligning migration with modern architectures while safeguarding core business processes. Another technique we support is behavior equivalence and leveraging data seams to integrate into the origin system while the architecture is going through its evolution.

Beyond the technical aspects, organizational misalignment is a frequent stumbling block. Modernization is a business transformation, not just an IT project, and one of the most reliable indicators of success is a courageous, well-supported leader who can steer the program through the inevitable stumbles and issues that arise. A clear business vision, tied to measurable outcomes like improved customer experience or reduced operational risk, is essential.

Fostering a culture of change through transparent communication, targeted training, and deliberate capability-building is crucial: the destination team must be fully trained and capable of operating a platform of this criticality and complexity, which goes far beyond a typical N-Tier architecture. Such preparation helps overcome internal resistance and ensures everyone understands, and can realize, long-term benefits.

Finally, integration and observability gaps can derail even the most well-intentioned modernization efforts. Legacy systems are often deeply embedded within the broader IT ecosystem, so updating core components can surface unforeseen integration challenges.

To counter this, we advocate for enhancing observability from day one, including baselining the performance of existing mainframe jobs and screen transactions; these metrics establish a benchmark to keep the modernized environment aligned with current service levels.

This early telemetry is paired with modern monitoring solutions and real-time dashboards that provide comprehensive insights into system behavior. Prioritizing API-first integration ensures seamless communication between legacy and new architectures, while automated testing at integration points minimizes disruption risk during the transition.

Generative AI is accelerating mainframe modernization by offering powerful opportunities to analyze legacy systems and streamline transformations, delivering greater agility and resilience. This shift is mirrored by modernization spending moving from defensive capital expenditure to growth-focused operational expenditure.

Success in this evolving landscape hinges on disciplined execution, continuous measurement, and transparent communication, rather than merely relying on tools. Furthermore, enhanced cloud platforms now provide flexible and secure migration paths, significantly boosting the strategic importance of these efforts due to heightened regulatory scrutiny on operational resilience.

Here’s a modernization manifesto to bear in mind:

• Start with the business capability map, not the code tree. Technology serves the business.
• Prefer incremental stranglers over all-or-nothing migrations. Decommissioning legacy components is a tangible win.
• Automate everything twice – first to understand, then to transform. Leverage code scanners, synthetic data, and automated testing.
• Invest in people before platforms – empower cross-functional teams that own both the old and the new.
• Measure outcomes continuously and publicly – demonstrate the business value of modernization with clear KPIs.

In conclusion, mainframe end-of-life is not an event to be feared, but a strategic imperative to be navigated with diligence and foresight. It’s a long-term commitment to ensuring our critical value streams remain adaptable and resilient.

We list the best laptop for programming.

This article was produced as part of TechRadarPro's Expert Insights channel where we feature the best and brightest minds in the technology industry today. The views expressed here are those of the author and are not necessarily those of TechRadarPro or Future plc. If you are interested in contributing find out more here: https://www.techradar.com/news/submit-your-story-to-techradar-pro

Complex problems often demand simple answers. When we overcomplicate things, whether in life or business, we almost always end up worse off. Later, we look back and think: if only I’d kept it simple.

Cybersecurity is no different, though the source of that simplicity may lie in unexpected places.

With the National Cyber Security Centre (NCSC) now sounding the alarm on quantum-era threats and AI-powered malware, it’s clear the risks are evolving fast. These threats adapt, mutate and inject themselves into systems at alarming speed. It’s no wonder business leaders are extremely concerned about the risk of existing cyber strategies and deployed solutions being overwhelmed.

A recent McKinsey report reveals that cybersecurity spending surged to $200 billion in 2024—up from $140 billion in 2020—yet breaches keep rising.

To confront these rising risks, organizations are doubling down on complex cybersecurity stacks, layering tools in the belief that more technology equals more protection.

But what if that logic is flawed? What if, instead of boosting your system resilience, complexity increases and hides your vulnerabilities? In truth, we’re stuck in a complexity trap.

Organizations are drowning in software solutions that promise the world but deliver confusion. Each new tool might address a specific threat vector, but the resulting patchwork of platforms often leads to fragmented visibility and hidden blind spots.

In short, we risk opening more doors that attackers can walk through.

By trying to guard against every threat, we become entangled in complexity and exposed to its consequences—creating a false sense of security in the process.

When you strip back your cybersecurity layers and concentrate on a back-to-basics approach that’s founded on clarity, control and isolation, you achieve better protection than any complex software stack.

Now, this isn’t about throwing out digital defenses. It’s about recognising their limits and rethinking where real resilience comes from.

Software alone, no matter how smart, is still vulnerable to manipulation. And with AI supercharging attacks in real time—learning from failed breach attempts, mimicking user behavior and exploiting every crack in the system at an accelerating pace—this has never been truer.

That’s why physical isolation has stepped back into the conversation. It’s not just a legacy idea from a pre-cloud era; it’s the critical missing idea in modern cyber strategy.

Highly motivated threat actors and AI-powered malware have the ability to think and spread without human input. With devastating precision, it targets high-value assets, adapting mid-attack.

This calls for a defense that is unhackable by nature.

Hardware-based network isolation is exactly that. When systems are physically segmented—truly separated from the internet – remote infection becomes impossible. The key to modern deployment of this traditional airgap method lies in being able to control it, at will, on demand.

If malware can't make contact, it can't compromise. It’s that simple.

Even if a system is somehow breached, physical segmentation allows businesses to readily contain the threat. When you isolate systems from one another with hardware, not just firewalls or virtual LANs, you prevent lateral movement, stop data exfiltration and drastically reduce the blast radius of any attack.

This is especially critical for operational technology, critical infrastructure and sensitive research environments, where uptime is essential and downtime is catastrophic.

The complexity trap is reflected in how we spend. According to industry research, 65% of cyber budgets now go to third-party tools and services, outpacing investment in in-house capability.

But security is not just a tech problem; it’s a strategic design challenge. Businesses today react to new threats by accumulating more tools. What’s needed instead is a clear, layered security plan that’s built with purpose, not patched together.

That begins with rethinking how much of your infrastructure truly needs to be online. In a hyperconnected world, we’ve defaulted to keeping everything on all the time.

But always-on equals always-vulnerable. If certain data or systems don’t require constant internet access, why expose them?

By selectively disconnecting key assets, at the right time, you can regain control of your business.

Let’s be clear: this isn’t a step backward. It’s a step toward resilience. Software-based security remains essential. But as threats evolve, our defenses must too.

Layered protection that starts with hardware-based control is the only viable way forward. It combines the speed and scale of software with the unbreachable foundations of physical isolation.

Think of it like a bank vault. The digital defenses are the alarms, cameras and motion detectors. But the vault? That’s your hardware-based barrier. Even the smartest thief can’t crack it from a distance.

Protecting your systems isn’t just about keeping up with the latest threats. It’s about doing what works, what’s reliable and proven.

Because just like in life, the clearest answers are often the strongest ones.

And in cybersecurity, simplicity is the ultimate advantage.

We list the best endpoint protection software.

This article was produced as part of TechRadarPro's Expert Insights channel where we feature the best and brightest minds in the technology industry today. The views expressed here are those of the author and are not necessarily those of TechRadarPro or Future plc. If you are interested in contributing find out more here: https://www.techradar.com/news/submit-your-story-to-techradar-pro

• Colors have leaked for the Z Fold 7 and Z Flip 7
• The leak comes from Samsung's own website
• We could get three main colors for each phone

We've already seen plenty of Samsung Galaxy Z Fold 7 and Galaxy Z Flip 7 leaks in recent days – and now it appears Samsung has got in on the act itself

As spotted by Android Authority, certain pages have gone live on Samsung's Ireland website, showing three colors for the Z Fold 7 and three for the Z Flip 7 – with both handsets getting a fourth Green Mint shade that's exclusive to the website.

For the Samsung Galaxy Z Fold 7, it looks like we'll get Jet Black, Blue Shadow, and Silver Shadow. That compares to Silver Shadow, Pink, and Navy for the Samsung Galaxy Z Fold 6, at least in the US (with Crafted Black and White as website exclusives).

The leak suggests Jet Black, Blue Shadow, and Coral Red as the main colors for the Samsung Galaxy Z Flip 7. In the US right now, you can pick up the Samsung Galaxy Z Flip 6 in Yellow, Mint, Silver Shadow, and Blue, with Black, Peach, and White the colors exclusive to Samsung's website).

More Galaxy Z Fold7 images have emerged!Via @evleaks pic.twitter.com/NPm0bJE82lJune 25, 2025

This latest leak lines up pretty neatly with what we've previously heard about the Samsung Galaxy Z Fold 7 colors and the Samsung Galaxy Z Flip 7 colors. While there will of course be variations over time and between regions, it seems Samsung may have now settled on the color options it's going to give us.

It's worth mentioning that Coral Red has also been tipped for the Galaxy Z Fold 7, so it's possible that the distinctive shade is coming to both of these foldables – which are also both likely to be instant additions to our best foldable phones guide.

The color leaks also fit in neatly with unofficial renders posted by @evleaks: these renders also show Jet Black, Blue Shadow, and Silver Shadow for the Galaxy Z Fold 7, and Jet Black, Blue Shadow, and Coral Red for the Galaxy Z Flip 7.

What we do know for sure is that Samsung has scheduled the next Galaxy Unpacked event for Wednesday, July 9. The smart money suggests we should see both these flagship foldables appear, as well as the Samsung Galaxy Z Flip FE and the Samsung Galaxy Watch 8.

• Renders of Samsung's next foldables have leaked
• These are the best Android phones right now
• Android 16 is heading to the Z Fold 7 and Z Flip 7