CDN Tsunami Attack Abuses HTTP/3 Translation for Up to 350x DoS Amplification
Cybersecurity researchers have disclosed two denial-of-service (DoS) attacks that exploit how major content delivery networks (CDNs) convert client-facing HTTP/3 traffic into HTTP/1.1 requests to the websites they front, amplifying a low-bandwidth request stream by up to 350x against the origin server.
The attacks, collectively named “CDN Tsunami,” were evaluated against Alibaba, Baidu,
Source: The Hacker News
Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second Cybersecurity researchers have disclosed details of a remote Spectre attack against Cloudflare Workers that leaked a JSON Web Token (JWT)
Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In JetBrains is urging customers of on-premise versions of TeamCity to update to the latest version following the discovery
French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks An attacker used stolen passwords of staff at France’s tax administration to take tax data on hundreds