03 June 2026 - 12:31

Category: IT Fail

Surprise, HTTP/2 is broken again

A newly found HTTP/2 bomb exploit allows remote denial-of-service attacks on major web servers. Just what we needed to make our web infrastructure even more unstable.

Surprise, HTTP/2 is broken again

Source: The Hacker News

The Full Story

Severity: High Mood: Frustrating

It seems our beloved web servers, specifically NGINX, Apache HTTPD, Microsoft IIS, Envoy, and Cloudflare Pingora, are vulnerable to a remote denial-of-service exploit. Cybersecurity researchers have kindly pointed out this flaw, which ensures our servers can be knocked offline whenever someone feels like it. To protect our crumbling digital empire from this remote exploit, we must somehow address this server vulnerability, though I suspect we will just stare blankly at the screen instead.

#ohgoodanDoS #servermisery
Open article →