How Orca Traced an nginx Flaw to 1.45 Million Tengine Servers All Running Vulnerable Code (opens in new tab)

TL;DR When a critical nginx vulnerability hits the headlines, security teams patch nginx. But what if the same vulnerable code is running somewhere they’re not looking? While the rest of the industry was busy patching nginx, Orca’s Threat Research Team was asking a different question and the answer led us straight to Tengine. Tengine, Alibaba’s […] The post appeared first on .