#rapidreset — Public Fediverse posts

Again. HTTP 1.1 is broken. HTTP 2 is broken. Let's just agree to head back to gopher. I should set up a VM in Azure as a gopher host.

https://www.darkreading.com/vulnerabilities-threats/internet-wide-vulnerability-giant-ddos-attacks

#rapidreset #ddos

DDoS attacks are getting bigger and more powerful since the HTTP/2 Rapid Reset vulnerability was disclosed, and that's a really bad thing

#ddos #http #rapidreset #vulnerability
https://tchlp.com/4798GKj

HTTP/2 Rapid Reset: A New #Protocol #Vulnerability Will Haunt the Web for Years

Dubbed “HTTP/2 Rapid Reset,” the flaw requires issuing patches to virtually every #webserver around the world before the problem can be eradicated.
#Http2 #rapidreset #http2rapidreset

https://www.wired.com/story/http-2-rapid-reset-flaw/

#RapidReset: Angreifer nutzen Lücke im HTTP/2-Protokoll seit August 2023 aus | Security https://www.heise.de/news/Rapid-Reset-Angreifer-nutzten-Luecke-in-HTTP-2-Protokoll-seit-August-2023-aus-9330889.html #HTTP2

A couple of new things from the #CensysResearch team this week!

➡️ Unmasking Deception: Navigating Red Herrings and Honeypots (https://censys.com/red-herrings-and-honeypots/): A deep dive into some unusual, large scale #honeypot activity our team observed over the last few weeks. I'm a bit biased, but this is a really fun read about weird things on the Internet. Pairs nicely with morning coffee ☕ (or coffee anytime).

➡️ HTTP/Who? CVE-2023-44487 (https://censys.com/http-who-cve-2023-44487/) With the recent #HTTP2 #RapidReset vulnerability announced by #Cloudflare, #Google, and others, we examined the mechanics of the vulnerability, along with how prevalent HTTP/2 is. We currently see over 555 million hosts that appear to have the ability to upgrade to HTTP/2. More details in our post.

#CVE202344487
#securityResearch #infosec #cybersecurity #threatResearch

Organizations Respond to HTTP/2 Zero-Day Exploited for DDoS Attacks

"HTTP/2 Rapid Reset" used for record-breaking denial of service attacks, with requests peaking at hundreds of millions per second.

The vulnerability that enables this attack is tracked as CVE-2023-44487.

There are a ton of advisories covering this. This article is a nice summary of them all.

It's also been added to CISA's known exploited vulnerabilities catalog.

#cybersecurity #infosec #security #ddos #rapidreset

https://www.securityweek.com/organizations-respond-to-http-2-zero-day-exploited-for-ddos-attacks/

Between the curl vulnerability disclosure and the HTTP/2 Rapid Reset DDoS vulnerability, I feel like it's going to be quite the week this week. LET'S GO :D

#security #CVE202344487 #rapidreset #ddos #curl

On HTTP/2 Rapid Reset, Willy Tarreau from Haproxy:

So at first glance we indeed addressed this case in 2018

🤯

(this is what happens when heavy testing and torturing your software is part of your culture)

https://www.mail-archive.com/haproxy@formilux.org/msg44136.html

#haproxy #http2 #RapidReset #RapidResetAttack

HTTP2 rapid reset ddos attack

This one sounds nasty in how it abuses the http2 protocol to overwhelm a server.

https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/

#rapidReset #ddos #http2

📬 Rapid Reset DDoS-Angriff: Eine neue Gefahr für die Sicherheit im Netz
#Cyberangriffe #ITSicherheit #CVE202344487 #DDoSAngriff #GOAWAYFrame #HTTP 2Protokoll #HTTP2 #RapidReset #RapidResetDDoSAngriff https://tarnkappe.info/artikel/cyberangriff/rapid-reset-ddos-angriff-eine-neue-gefahr-fuer-die-sicherheit-im-netz-281322.html

Da er det bare å starte å patche webserverne sine. Google har identifisert en ny type DDoS som har medført verdens største DDoS-angrep mot deres skyplattform.

#teknologi #sikkerhet #rapidreset

https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack

We've released #Netty 4.1.100.Final, which adds mitigations for the #RapidReset attack (aka. CVE-2023-44487), a Denial of Service zero-day that's being actively exploited.
If you are using #http2 on a server (_especially_ if it's on the open internet), you should upgrade ASAP.
See our release notes https://netty.io/news/2023/10/10/4-1-100-Final.html and the Cloudflare blog https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack/
#java

I maintain some notes about HTTP/2 ‘Rapid Reset’ DDoS attack - CVE-2023-44487

🔗 https://gist.github.com/adulau/7c2bfb8e9cdbe4b35a5e131c66a0c088

#rapidreset #http2 #infosec #ddos #vulnerability #CVE-2023-44487