「Apache」「Node.js」も ～多くの実装が影響を受ける脆弱性「HTTP/2 CONTINUATION Flood」／「Rapid Reset」脆弱性と比べても深刻

2024/04/09 100 users http Apache node.js 実装 脆弱性

続きを読む

HTTP/2 Rapid Reset：記録的な攻撃を分解する(翻訳記事）

2023/10/11 6 users http 攻撃 翻訳 翻訳記事 当社

この記事は以下のブログの翻訳です。 公式翻訳が完了次第削除します。 技術情報に誤りがある場合、遠慮なく、むしろ積極的に@kameoncloudまで連絡下さい。 2023年8月25日から、多くのお客様を襲った異常に大規模なHTTP攻撃に気付き始めました。これらの攻撃は当社の自動DDoSシステムによって検知され、軽減されました。... 続きを読む

How it works: The novel HTTP/2 ‘Rapid Reset’ DDoS attack | Google Cloud Blog

2023/10/10 15 users How it works

Hear monthly from our Cloud CISO in your inboxGet the latest on security from Cloud CISO Phil Venables. Subscribe A number of Google services and Cloud customers have been targeted with a novel HTTP/2-based DDoS attack which peaked in August. These attacks were significantly larger than any previ... 続きを読む

HTTP/2 Zero-Day Vulnerability Results in Record-Breaking DDoS Attacks

2023/10/10 6 users http Today AWS the HTTP

HTTP/2 Zero-Day Vulnerability Results in Record-Breaking DDoS Attacks Loading... Earlier today, Cloudflare, along with Google and Amazon AWS, disclosed the existence of a novel zero-day vulnerability dubbed the “HTTP/2 Rapid Reset” attack. This attack exploits a weakness in the HTTP/2 protocol to... 続きを読む

HTTP/2 Rapid Reset: deconstructing the record-breaking attack

2023/10/10 14 users http however START

HTTP/2 Rapid Reset: deconstructing the record-breaking attack Loading... Starting on Aug 25, 2023, we started to notice some unusually big HTTP attacks hitting many of our customers. These attacks were detected and mitigated by our automated DDoS system. It was not long however, before they start... 続きを読む