https://sandflysecurity.com/blog Linux security and forensic articles. Learn about Linux forensics and agentless security with Sandfly. en Wed, 30 Sep 2026 21:07:14 GMT 2026-09-30T21:07:14Z en https://sandflysecurity.com/blog/agentless-linux-edr-stopping-volt-and-salt-typhoon-in-ot-environments <div class="hs-featured-image-wrapper"> <a href="https://sandflysecurity.com/blog/agentless-linux-edr-stopping-volt-and-salt-typhoon-in-ot-environments" title="" class="hs-featured-image-link"> <img src="https://sandflysecurity.com/hubfs/Imported_Blog_Media/1784863456-typhoon-image-cropped.png" alt="Agentless Linux EDR: Stopping Volt and Salt Typhoon in OT Environments" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"> </a> </div> <span style="color: #ffffff; font-family: 'Inter Tight'; font-size: 18px; letter-spacing: 0px;">Publish date: 24 July 2026</span> <br> <div class="hs-featured-image-wrapper"> <a href="https://sandflysecurity.com/blog/agentless-linux-edr-stopping-volt-and-salt-typhoon-in-ot-environments" title="" class="hs-featured-image-link"> <img src="https://sandflysecurity.com/hubfs/Imported_Blog_Media/1784863456-typhoon-image-cropped.png" alt="Agentless Linux EDR: Stopping Volt and Salt Typhoon in OT Environments" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"> </a> </div> <span style="color: #ffffff; font-family: 'Inter Tight'; font-size: 18px; letter-spacing: 0px;">Publish date: 24 July 2026</span> <br> <img src="https://track-ap1.hubspot.com/__ptq.gif?a=442867139&amp;k=14&amp;r=https%3A%2F%2Fsandflysecurity.com%2Fblog%2Fagentless-linux-edr-stopping-volt-and-salt-typhoon-in-ot-environments&amp;bu=https%253A%252F%252Fsandflysecurity.com%252Fblog&amp;bvt=rss" alt="" width="1" height="1" style="min-height:1px!important;width:1px!important;border-width:0!important;margin-top:0!important;margin-bottom:0!important;margin-right:0!important;margin-left:0!important;padding-top:0!important;padding-bottom:0!important;padding-right:0!important;padding-left:0!important; "> Embedded Linux Public Sector Linux Security Manufacturing Telecommunications Thu, 23 Jul 2026 20:00:00 GMT https://sandflysecurity.com/blog/agentless-linux-edr-stopping-volt-and-salt-typhoon-in-ot-environments 2026-07-23T20:00:00Z Craig Rowland, Founder and CEO, Sandfly Security https://sandflysecurity.com/blog/how-agentless-linux-edr-detects-rootkits-over-ssh <div class="hs-featured-image-wrapper"> <a href="https://sandflysecurity.com/blog/how-agentless-linux-edr-detects-rootkits-over-ssh" title="" class="hs-featured-image-link"> <img src="https://sandflysecurity.com/hubfs/Imported_Blog_Media/1784253540-rootkit-tank.png" alt="How Agentless Linux EDR Detects Rootkits Over SSH" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"> </a> </div> <span style="color: #ffffff; letter-spacing: 0px;">Publication Date: 17 July 2026</span> <br> <div class="hs-featured-image-wrapper"> <a href="https://sandflysecurity.com/blog/how-agentless-linux-edr-detects-rootkits-over-ssh" title="" class="hs-featured-image-link"> <img src="https://sandflysecurity.com/hubfs/Imported_Blog_Media/1784253540-rootkit-tank.png" alt="How Agentless Linux EDR Detects Rootkits Over SSH" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"> </a> </div> <span style="color: #ffffff; letter-spacing: 0px;">Publication Date: 17 July 2026</span> <br> <img src="https://track-ap1.hubspot.com/__ptq.gif?a=442867139&amp;k=14&amp;r=https%3A%2F%2Fsandflysecurity.com%2Fblog%2Fhow-agentless-linux-edr-detects-rootkits-over-ssh&amp;bu=https%253A%252F%252Fsandflysecurity.com%252Fblog&amp;bvt=rss" alt="" width="1" height="1" style="min-height:1px!important;width:1px!important;border-width:0!important;margin-top:0!important;margin-bottom:0!important;margin-right:0!important;margin-left:0!important;padding-top:0!important;padding-bottom:0!important;padding-right:0!important;padding-left:0!important; "> Rootkits Malware Linux Forensics Thu, 16 Jul 2026 20:00:00 GMT https://sandflysecurity.com/blog/how-agentless-linux-edr-detects-rootkits-over-ssh 2026-07-16T20:00:00Z Sandfly Security - Agentless Linux EDR and Incident Response https://sandflysecurity.com/blog/deprecation-of-linux-kernels-prior-to-32-in-sandfly-58 <div class="hs-featured-image-wrapper"> <a href="https://sandflysecurity.com/blog/deprecation-of-linux-kernels-prior-to-32-in-sandfly-58" title="" class="hs-featured-image-link"> <img src="https://sandflysecurity.com/hubfs/Imported_Blog_Media/1784081543-5-8-update-thumbnail.png" alt="Deprecation of Linux Kernels Prior to 3.2 in Sandfly 5.8" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"> </a> </div> <h1 class="MuiTypography-root MuiTypography-h2 MuiTypography-gutterBottom mui-15sgmbo"><span style="font-size: 18px; font-weight: normal; letter-spacing: 0px;">P</span><span style="font-size: 18px; font-weight: normal; letter-spacing: 0px;">ublication Date: </span><span style="font-size: 18px; font-weight: normal; letter-spacing: 0px;">1</span><span style="font-size: 18px; font-weight: normal; letter-spacing: 0px;">4</span><span style="font-size: 18px; font-weight: normal; letter-spacing: 0px;"> July 2026</span></h1> <div class="hs-featured-image-wrapper"> <a href="https://sandflysecurity.com/blog/deprecation-of-linux-kernels-prior-to-32-in-sandfly-58" title="" class="hs-featured-image-link"> <img src="https://sandflysecurity.com/hubfs/Imported_Blog_Media/1784081543-5-8-update-thumbnail.png" alt="Deprecation of Linux Kernels Prior to 3.2 in Sandfly 5.8" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"> </a> </div> <h1 class="MuiTypography-root MuiTypography-h2 MuiTypography-gutterBottom mui-15sgmbo"><span style="font-size: 18px; font-weight: normal; letter-spacing: 0px;">P</span><span style="font-size: 18px; font-weight: normal; letter-spacing: 0px;">ublication Date: </span><span style="font-size: 18px; font-weight: normal; letter-spacing: 0px;">1</span><span style="font-size: 18px; font-weight: normal; letter-spacing: 0px;">4</span><span style="font-size: 18px; font-weight: normal; letter-spacing: 0px;"> July 2026</span></h1> <img src="https://track-ap1.hubspot.com/__ptq.gif?a=442867139&amp;k=14&amp;r=https%3A%2F%2Fsandflysecurity.com%2Fblog%2Fdeprecation-of-linux-kernels-prior-to-32-in-sandfly-58&amp;bu=https%253A%252F%252Fsandflysecurity.com%252Fblog&amp;bvt=rss" alt="" width="1" height="1" style="min-height:1px!important;width:1px!important;border-width:0!important;margin-top:0!important;margin-bottom:0!important;margin-right:0!important;margin-left:0!important;padding-top:0!important;padding-bottom:0!important;padding-right:0!important;padding-left:0!important; "> News Product Update Mon, 13 Jul 2026 20:00:00 GMT https://sandflysecurity.com/blog/deprecation-of-linux-kernels-prior-to-32-in-sandfly-58 2026-07-13T20:00:00Z Sandfly Security - Agentless Linux EDR and Incident Response https://sandflysecurity.com/blog/sandflys-agentless-linux-edr-ai-are-a-powerful-combo <div class="hs-featured-image-wrapper"> <a href="https://sandflysecurity.com/blog/sandflys-agentless-linux-edr-ai-are-a-powerful-combo" title="" class="hs-featured-image-link"> <img src="https://sandflysecurity.com/hubfs/Imported_Blog_Media/1783029184-agentless-edr-ai-are-a-powerful-combo.png" alt="Sandfly's Agentless Linux EDR + AI Are a Powerful Combo" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"> </a> </div> <span style="color: #ffffff; letter-spacing: 0px;">P</span> <span style="color: #ffffff; letter-spacing: 0px;">ublication Date: </span> <span style="color: #ffffff; letter-spacing: 0px;">02 July 2026</span> <br> <div class="hs-featured-image-wrapper"> <a href="https://sandflysecurity.com/blog/sandflys-agentless-linux-edr-ai-are-a-powerful-combo" title="" class="hs-featured-image-link"> <img src="https://sandflysecurity.com/hubfs/Imported_Blog_Media/1783029184-agentless-edr-ai-are-a-powerful-combo.png" alt="Sandfly's Agentless Linux EDR + AI Are a Powerful Combo" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"> </a> </div> <span style="color: #ffffff; letter-spacing: 0px;">P</span> <span style="color: #ffffff; letter-spacing: 0px;">ublication Date: </span> <span style="color: #ffffff; letter-spacing: 0px;">02 July 2026</span> <br> <img src="https://track-ap1.hubspot.com/__ptq.gif?a=442867139&amp;k=14&amp;r=https%3A%2F%2Fsandflysecurity.com%2Fblog%2Fsandflys-agentless-linux-edr-ai-are-a-powerful-combo&amp;bu=https%253A%252F%252Fsandflysecurity.com%252Fblog&amp;bvt=rss" alt="" width="1" height="1" style="min-height:1px!important;width:1px!important;border-width:0!important;margin-top:0!important;margin-bottom:0!important;margin-right:0!important;margin-left:0!important;padding-top:0!important;padding-bottom:0!important;padding-right:0!important;padding-left:0!important; "> Linux Security Linux Forensics Education AI Wed, 01 Jul 2026 20:00:00 GMT https://sandflysecurity.com/blog/sandflys-agentless-linux-edr-ai-are-a-powerful-combo 2026-07-01T20:00:00Z Sandfly Security - Agentless Linux EDR and Incident Response https://sandflysecurity.com/blog/sandfly-58-agentless-response-and-ssh-key-management <div class="hs-featured-image-wrapper"> <a href="https://sandflysecurity.com/blog/sandfly-58-agentless-response-and-ssh-key-management" title="" class="hs-featured-image-link"> <img src="https://sandflysecurity.com/hubfs/Imported_Blog_Media/1782703958-5-8-thumbnail-logo.png" alt="Sandfly 5.8 - Agentless Linux Response and SSH Key Management" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"> </a> </div> <span style="color: #ffffff; letter-spacing: 0px;">Publication Date: 29 June 2026</span> <br> <div class="hs-featured-image-wrapper"> <a href="https://sandflysecurity.com/blog/sandfly-58-agentless-response-and-ssh-key-management" title="" class="hs-featured-image-link"> <img src="https://sandflysecurity.com/hubfs/Imported_Blog_Media/1782703958-5-8-thumbnail-logo.png" alt="Sandfly 5.8 - Agentless Linux Response and SSH Key Management" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"> </a> </div> <span style="color: #ffffff; letter-spacing: 0px;">Publication Date: 29 June 2026</span> <br> <img src="https://track-ap1.hubspot.com/__ptq.gif?a=442867139&amp;k=14&amp;r=https%3A%2F%2Fsandflysecurity.com%2Fblog%2Fsandfly-58-agentless-response-and-ssh-key-management&amp;bu=https%253A%252F%252Fsandflysecurity.com%252Fblog&amp;bvt=rss" alt="" width="1" height="1" style="min-height:1px!important;width:1px!important;border-width:0!important;margin-top:0!important;margin-bottom:0!important;margin-right:0!important;margin-left:0!important;padding-top:0!important;padding-bottom:0!important;padding-right:0!important;padding-left:0!important; "> News Product Update Sun, 28 Jun 2026 20:00:00 GMT https://sandflysecurity.com/blog/sandfly-58-agentless-response-and-ssh-key-management 2026-06-28T20:00:00Z Sandfly Security - Agentless Linux EDR and Incident Response https://sandflysecurity.com/blog/linux-scales-ebpf-rootkit-detection-and-analysis <div class="hs-featured-image-wrapper"> <a href="https://sandflysecurity.com/blog/linux-scales-ebpf-rootkit-detection-and-analysis" title="" class="hs-featured-image-link"> <img src="https://sandflysecurity.com/hubfs/Imported_Blog_Media/1782248168-scales-rootkit-thumbnail.png" alt="Linux Scales eBPF Rootkit Detection and Analysis" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"> </a> </div> <span style="color: #ffffff; letter-spacing: 0px;">Publication Date: 24 June 2026</span> <br> <div class="hs-featured-image-wrapper"> <a href="https://sandflysecurity.com/blog/linux-scales-ebpf-rootkit-detection-and-analysis" title="" class="hs-featured-image-link"> <img src="https://sandflysecurity.com/hubfs/Imported_Blog_Media/1782248168-scales-rootkit-thumbnail.png" alt="Linux Scales eBPF Rootkit Detection and Analysis" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"> </a> </div> <span style="color: #ffffff; letter-spacing: 0px;">Publication Date: 24 June 2026</span> <br> <img src="https://track-ap1.hubspot.com/__ptq.gif?a=442867139&amp;k=14&amp;r=https%3A%2F%2Fsandflysecurity.com%2Fblog%2Flinux-scales-ebpf-rootkit-detection-and-analysis&amp;bu=https%253A%252F%252Fsandflysecurity.com%252Fblog&amp;bvt=rss" alt="" width="1" height="1" style="min-height:1px!important;width:1px!important;border-width:0!important;margin-top:0!important;margin-bottom:0!important;margin-right:0!important;margin-left:0!important;padding-top:0!important;padding-bottom:0!important;padding-right:0!important;padding-left:0!important; "> Rootkits Malware Linux Forensics Tue, 23 Jun 2026 20:00:00 GMT https://sandflysecurity.com/blog/linux-scales-ebpf-rootkit-detection-and-analysis 2026-06-23T20:00:00Z Sandfly Security - Agentless Linux EDR and Incident Response https://sandflysecurity.com/blog/how-linux-malware-works-from-simple-to-sophisticated <div class="hs-featured-image-wrapper"> <a href="https://sandflysecurity.com/blog/how-linux-malware-works-from-simple-to-sophisticated" title="" class="hs-featured-image-link"> <img src="https://sandflysecurity.com/hubfs/Screenshot%202026-10-01%20at%2010.01.26%20AM.png" alt="How Linux Malware Works, From Simple to Sophisticated" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"> </a> </div> <p>Publication Date: 17 June 2026</p> <div class="hs-featured-image-wrapper"> <a href="https://sandflysecurity.com/blog/how-linux-malware-works-from-simple-to-sophisticated" title="" class="hs-featured-image-link"> <img src="https://sandflysecurity.com/hubfs/Screenshot%202026-10-01%20at%2010.01.26%20AM.png" alt="How Linux Malware Works, From Simple to Sophisticated" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"> </a> </div> <p>Publication Date: 17 June 2026</p> <img src="https://track-ap1.hubspot.com/__ptq.gif?a=442867139&amp;k=14&amp;r=https%3A%2F%2Fsandflysecurity.com%2Fblog%2Fhow-linux-malware-works-from-simple-to-sophisticated&amp;bu=https%253A%252F%252Fsandflysecurity.com%252Fblog&amp;bvt=rss" alt="" width="1" height="1" style="min-height:1px!important;width:1px!important;border-width:0!important;margin-top:0!important;margin-bottom:0!important;margin-right:0!important;margin-left:0!important;padding-top:0!important;padding-bottom:0!important;padding-right:0!important;padding-left:0!important; "> Videos Malware Linux Security Presentations Webinar Tue, 16 Jun 2026 20:00:00 GMT https://sandflysecurity.com/blog/how-linux-malware-works-from-simple-to-sophisticated 2026-06-16T20:00:00Z Craig Rowland, Founder and CEO, Sandfly Security https://sandflysecurity.com/blog/hunting-linux-implants-agentlessly-at-locked-shields-2026 <div class="hs-featured-image-wrapper"> <a href="https://sandflysecurity.com/blog/hunting-linux-implants-agentlessly-at-locked-shields-2026" title="" class="hs-featured-image-link"> <img src="https://sandflysecurity.com/hubfs/Imported_Blog_Media/1781475762-nato-locked-shields.png" alt="Hunting Linux Implants Agentlessly at Locked Shields 2026" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"> </a> </div> <span style="color: #ffffff; letter-spacing: 0px;">Publication Date: 15 June 2026</span> <div class="hs-featured-image-wrapper"> <a href="https://sandflysecurity.com/blog/hunting-linux-implants-agentlessly-at-locked-shields-2026" title="" class="hs-featured-image-link"> <img src="https://sandflysecurity.com/hubfs/Imported_Blog_Media/1781475762-nato-locked-shields.png" alt="Hunting Linux Implants Agentlessly at Locked Shields 2026" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"> </a> </div> <span style="color: #ffffff; letter-spacing: 0px;">Publication Date: 15 June 2026</span> <img src="https://track-ap1.hubspot.com/__ptq.gif?a=442867139&amp;k=14&amp;r=https%3A%2F%2Fsandflysecurity.com%2Fblog%2Fhunting-linux-implants-agentlessly-at-locked-shields-2026&amp;bu=https%253A%252F%252Fsandflysecurity.com%252Fblog&amp;bvt=rss" alt="" width="1" height="1" style="min-height:1px!important;width:1px!important;border-width:0!important;margin-top:0!important;margin-bottom:0!important;margin-right:0!important;margin-left:0!important;padding-top:0!important;padding-bottom:0!important;padding-right:0!important;padding-left:0!important; "> News Public Sector Sun, 14 Jun 2026 20:00:00 GMT https://sandflysecurity.com/blog/hunting-linux-implants-agentlessly-at-locked-shields-2026 2026-06-14T20:00:00Z Sandfly Security - Agentless Linux EDR and Incident Response https://sandflysecurity.com/blog/detecting-copy-fail-linux-vulnerability-agentlessly-with-sandfly <div class="hs-featured-image-wrapper"> <a href="https://sandflysecurity.com/blog/detecting-copy-fail-linux-vulnerability-agentlessly-with-sandfly" title="" class="hs-featured-image-link"> <img src="https://sandflysecurity.com/hubfs/Imported_Blog_Media/1778042103-copy-fail-image.png" alt="Detecting Copy Fail Linux Vulnerability Agentlessly with Sandfly" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"> </a> </div> <div class="MuiGrid-root MuiGrid-container MuiGrid-direction-xs-row mui-1f11l0v"> <div class="MuiGrid-root MuiGrid-direction-xs-row MuiGrid-grid-xs-grow mui-1fzf7xv"> <p class="MuiTypography-root MuiTypography-body2 mui-1ts6b32">Publication Date: 06 May 2026</p> </div> </div> <div class="hs-featured-image-wrapper"> <a href="https://sandflysecurity.com/blog/detecting-copy-fail-linux-vulnerability-agentlessly-with-sandfly" title="" class="hs-featured-image-link"> <img src="https://sandflysecurity.com/hubfs/Imported_Blog_Media/1778042103-copy-fail-image.png" alt="Detecting Copy Fail Linux Vulnerability Agentlessly with Sandfly" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"> </a> </div> <div class="MuiGrid-root MuiGrid-container MuiGrid-direction-xs-row mui-1f11l0v"> <div class="MuiGrid-root MuiGrid-direction-xs-row MuiGrid-grid-xs-grow mui-1fzf7xv"> <p class="MuiTypography-root MuiTypography-body2 mui-1ts6b32">Publication Date: 06 May 2026</p> </div> </div> <img src="https://track-ap1.hubspot.com/__ptq.gif?a=442867139&amp;k=14&amp;r=https%3A%2F%2Fsandflysecurity.com%2Fblog%2Fdetecting-copy-fail-linux-vulnerability-agentlessly-with-sandfly&amp;bu=https%253A%252F%252Fsandflysecurity.com%252Fblog&amp;bvt=rss" alt="" width="1" height="1" style="min-height:1px!important;width:1px!important;border-width:0!important;margin-top:0!important;margin-bottom:0!important;margin-right:0!important;margin-left:0!important;padding-top:0!important;padding-bottom:0!important;padding-right:0!important;padding-left:0!important; "> Product Update Malware Linux Security Tue, 05 May 2026 20:00:00 GMT https://sandflysecurity.com/blog/detecting-copy-fail-linux-vulnerability-agentlessly-with-sandfly 2026-05-05T20:00:00Z Sandfly Security - Agentless Linux EDR and Incident Response https://sandflysecurity.com/blog/webinar-5-linux-security-blind-spots-putting-government-agencies-at-risk <div class="hs-featured-image-wrapper"> <a href="https://sandflysecurity.com/blog/webinar-5-linux-security-blind-spots-putting-government-agencies-at-risk" title="" class="hs-featured-image-link"> <img src="https://sandflysecurity.com/hubfs/Imported_Blog_Media/1775695829-5-linux-security-blind-spots-webinar_fb-li.jpg" alt="5 Linux Security Blind Spots Putting Government Agencies at Risk" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"> </a> </div> <span style="color: #ffffff; letter-spacing: 0px;">Publication Date: 08 April 2026</span> <br> <div class="hs-featured-image-wrapper"> <a href="https://sandflysecurity.com/blog/webinar-5-linux-security-blind-spots-putting-government-agencies-at-risk" title="" class="hs-featured-image-link"> <img src="https://sandflysecurity.com/hubfs/Imported_Blog_Media/1775695829-5-linux-security-blind-spots-webinar_fb-li.jpg" alt="5 Linux Security Blind Spots Putting Government Agencies at Risk" class="hs-featured-image" style="width:auto !important; max-width:50%; float:left; margin:0 15px 15px 0;"> </a> </div> <span style="color: #ffffff; letter-spacing: 0px;">Publication Date: 08 April 2026</span> <br> <img src="https://track-ap1.hubspot.com/__ptq.gif?a=442867139&amp;k=14&amp;r=https%3A%2F%2Fsandflysecurity.com%2Fblog%2Fwebinar-5-linux-security-blind-spots-putting-government-agencies-at-risk&amp;bu=https%253A%252F%252Fsandflysecurity.com%252Fblog&amp;bvt=rss" alt="" width="1" height="1" style="min-height:1px!important;width:1px!important;border-width:0!important;margin-top:0!important;margin-bottom:0!important;margin-right:0!important;margin-left:0!important;padding-top:0!important;padding-bottom:0!important;padding-right:0!important;padding-left:0!important; "> Linux Security Webinar Tue, 07 Apr 2026 20:00:00 GMT https://sandflysecurity.com/blog/webinar-5-linux-security-blind-spots-putting-government-agencies-at-risk 2026-04-07T20:00:00Z Sandfly Security - Agentless Linux EDR and Incident Response