Netcrook
#HTTP/2 Bomb
The Quiet War Over Machine-Readable Trust
A security roundup points to a growing fight over files and protocols that tools obey automatically, from repository instructions to archive handlers and HTTP/2 traffic.
HTTP/2’s Speed Layer Becomes a Memory Trap
A newly described remote denial-of-service pattern shows how header compression and connection retention can turn HTTP/2 into a resource-exhaustion problem for major web stacks.
The Web Protocol Trap That Can Freeze a Server in Seconds
A reported "HTTP/2 Bomb" pairs compression pressure with Slowloris-style connection holding, showing how default web protocol behavior can turn into rapid denial-of-service risk.
HTTP/2’s Speed Trap: A Remote DoS Warning for Web Servers at the Edge
A reported “HTTP/2 Bomb” issue puts availability back in the spotlight, showing how default HTTP/2 handling can become a pressure point for major web servers and proxies.
HTTP/2 Bomb Raises a New Availability Alarm for Major Server Stacks
A newly disclosed HTTP/2 issue may enable remote denial-of-service conditions against nginx, Apache httpd, Microsoft IIS, Envoy, and Cloudflare Pingora.
HTTP/2 Bomb Puts Memory Pressure Back on the Defensive Map
A new exploit label is drawing attention to a familiar problem: HTTP/2 efficiency features can become resource-pressure points when limits are too loose.