Cybersecurity researchers have discovered a remote
denial-of-service exploit that affects major web servers, including
NGINX, Apache HTTPD, Microsoft IIS, Envoy, and Cloudflare Pingora.
The vulnerability has been codenamed HTTP/2 Bomb by Calif. "The
vulnerable behavior exists in each server's default HTTP/2
configuration," the company said, adding it was discovered by
OpenAI Codex by chaining
Read more https://thehackernews.com/2026/06/new-http2-bomb-vulnerability-allows.html
