dos news
2 stories
CDN Tsunami Attack Abuses HTTP/3 Translation for Up to 350x DoS Amplification
New research has revealed a pair of denial-of-service (DoS) attack techniques, collectively termed "CDN Tsunami," that leverage the protocol translation mechanisms within major content delivery networks. These methods exploit the process by which CDNs convert HTTP/3 requests into HTTP/1.1 for communication with origin servers, enabling attackers to amplify relatively small requests into…
HollowByte DDoS flaw bloats OpenSSL server memory
A denial-of-service vulnerability, dubbed HollowByte, has been identified in OpenSSL, allowing unauthenticated attackers to deplete server memory with minimal data transmission. The OpenSSL team has addressed the flaw in recent updates, though no CVE identifier has been assigned. Organizations are strongly advised to update their OpenSSL installations to a patched version.