Researchers Found Six Major CDNs Vulnerable to New HTTP/3 Attacks. Two Deployed Mitigations.

Researchers have published two denial of service techniques that turn a content delivery network against the site behind it. They tested Alibaba, Baidu, Cloudflare, CloudFront, Fastly and Tencent. All six amplified an attacker’s traffic on the way to the origin server, and the researchers identified 42,330 subdomains potentially exposed. Baidu and Tencent have deployed the researchers’…