New HTTP/2 Bomb Vulnerability Threatens Major Web Servers

Cybersecurity researchers have identified a critical remote denial-of-service vulnerability, dubbed 'HTTP/2 Bomb,' impacting widely used web servers such as NGINX, Apache HTTPD, and Microsoft IIS. This exploit leverages HTTP/2's header compression and a Slowloris-style attack to exhaust server resources. The discovery highlights a significant security risk for internet infrastructure.