HTTP/2 Zero-Day Vulnerability Results in Record-Breaking DDoS Attacks

The “HTTP/2 Rapid Reset” attack exploits a weakness in the HTTP/2 protocol to generate enormous, hyper-volumetric DDoS attacks. Cloudflare has mitigated a barrage of these attacks in recent months, including an attack three times larger than any previous attack we’ve observed

attack attacks breaking cloudflare ddos ddos attacks exploits http protocol rapid record reset results security volumetric vulnerabilities vulnerability weakness zero-day zero-day vulnerability