topic Re: HTTP-2 Rapid Reset - Distributed Denial of Service in Threats

HTTP-2 Rapid Reset - Distributed Denial of Service

Caute_cautim — Tue, 10 Oct 2023 23:53:14 GMT

Hi All

A new DDoS (distributed denial of service) technique named 'HTTP/2 Rapid Reset' has been actively exploited as a zero-day since August, breaking all previous records in magnitude.

News of the zero-day technique comes as a coordinated announcement today between Amazon Web Services, Cloudflare, and Google, who report mitigating attacks reaching 155 million requests per second (Amazon), 201 million rps (Cloudflare), and a record-breaking 398 million rps (Google).

Google says they were able to mitigate these new attacks by adding further capacity on the edge of their network.

https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records/

Regards

Caute_Cautim

Re: HTTP-2 Rapid Reset - Distributed Denial of Service

ericgeater — Wed, 11 Oct 2023 12:22:10 GMT

How widely used is HTTP2? I think this was the first time I'd heard the term.

Also, Amazon doesn't share much details, but they did write up a response to the event.

Re: HTTP-2 Rapid Reset - Distributed Denial of Service

Caute_cautim — Wed, 11 Oct 2023 23:15:26 GMT

@ericgeaterDark Reading has also issued a follow up too and explanation: Along with CVE details:

https://www.darkreading.com/cloud/internet-wide-zero-day-bug-fuels-largest-ever-ddos-event

Regards

Caute_Cautim