HTTP/2 Rapid Reset Zero-Day Vulnerability Exploited to Launch Record DDoS AttacksAmazon Web Services (AWS), Cloudflare, and Google on Tuesday said they took steps to mitigate record-breaking distributed denial-of-service (DDoS) attacks that relied on a novel technique called HTTP/2 Rapid Reset.
The layer 7 attacks were detected in late August 2023, the companies said in a coordinated disclosure. The cumulative susceptibility to this attack is being tracked as CVE-2023-44487,
Source: HTTP/2 Rapid Reset Zero-Day Vulnerability Exploited to Launch Record DDoS Attacks (https://thehackernews.com/2023/10/http2-rapid-reset-zero-day.html)