aioquic: QUIC and HTTP/3 Implementation
aioquic is a Python implementation of QUIC and HTTP/3 used by researchers to probe subdomains for HTTP/3 support in the CDN Tsunami…
Tag: HTTP/3
CDN Tsunami Attacks Exploit HTTP/3 Translation for Up to 350x DoS Amplification
Cybersecurity researchers have disclosed two denial-of-service (DoS) attack techniques, collectively named "CDN Tsunami," that exploit how major content delivery networks (CDNs) convert…
SASE Has an AI Blind Spot: Why Packet Inspection Falls Short in Modern Enterprise Security
For years, routing traffic through cloud proxies was sufficient for enterprise security. However, the shift to browser-based work, SaaS applications, and generative…
Unpatched XRING Flaw in Alibaba’s XQUIC Lets Remote Clients Crash HTTP/3 Servers
A critical unpatched vulnerability, dubbed XRING, has been disclosed in XQUIC, Alibaba's open-source QUIC and HTTP/3 library. Discovered by FoxIO researcher Sébastien…
XQUIC: Alibaba’s QUIC and HTTP/3 Library
XQUIC is Alibaba's QUIC and HTTP/3 library, used in Tengine web server. A separate flaw in QPACK dynamic table handling could crash…
Tengine: Alibaba’s Web Server
Tengine is a web server developed by Alibaba, based on Nginx, providing HTTP/3 support via XQUIC. It is used across Alibaba's cloud…
F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution
F5 has released security updates to address two critical vulnerabilities in NGINX Open Source that could allow remote code execution. The flaws,…