HTTP/2 Bomb DoS: Memory Exhaustion via HPACK and Flow Control (nginx, Apache, IIS)
A new denial-of-service technique can crash web servers by exhausting their memory, security researchers from California revealed in early June 2026. Dubbed HTTP/2 Bomb, the attack exploits...