Codex Discovered a Hidden HTTP/2 Bomb (opens in new tab) ⚙operating systems Content type: Blog 27 articles covering this post

blog.calif.io··Lobsters, Hacker News·Covered by bleepingcomputer.com + 25 more·Covers: The Real World AI Security conference 2026·Open original

14 years ago, I helped break HTTP header compression, then was asked to review the fix, which became part of HTTP/2. Life has come full circle: today we're releasing an attack I missed.

Read the original article

Sign in to keep reading the full article.

Sign Up Log In

Covered in 27 articles

New 'HTTP/2 Bomb' DoS attack crashes web servers in under a minute

bleepingcomputer.com·

‘HTTP/2 Bomb’ Exploit Knocks Web Servers Offline in Seconds

securityweek.com·

OpenAI's agent chained decade-old DoS attacks to crash web servers in seconds

theregister.com··Hacker News, r/artificial

View all 27 ›