Sandfly Blog

6 min read

Log in to answers, not alerts: what’s new in Sandfly 6.0

Why Linux alert queues are failing your SOC Linux alert volume grows faster than security teams do. Sandfly 6.0 analyzes your hosts in the background, groups what it finds by artifact, and prioritizes it so your team opens the dashboard to a ranked...

Read More

2 min read

CVE-2026-98432: Linux Kernel TCP Flaw, MPTCP Listeners, and Sandfly

A critical vulnerability in the Linux kernel’s IPv4 networking code, tracked as CVE-2026-98432 (CVSS 9.8), allows potential remote, unauthenticated...

Read More