https://b.hatena.ne.jp/entry/s/blog.calif.io/p/codex-discovered-a-hidden-http2-bomb We’re publishing HTTP/2 Bomb, a remote denial-of-service exploit against most major web servers, including: nginx Apache httpd Microsoft IIS Envoy Cloudflare Pingora The vulnerable behavior exists ... https://b.hatena.ne.jp/nemurin48/20260607#bookmark-4788249396470643202 2026-06-06T15:42:10Z あとで読む https://b.hatena.ne.jp/sionsou/20260605#bookmark-4788249396470643202 2026-06-05T13:07:41Z https://b.hatena.ne.jp/nilab/20260605#bookmark-4788249396470643202 "We’re publishing HTTP/2 Bomb, a remote denial-of-service exploit against most major web servers" "We disclosed to Apache on May 27, and Stefan Eissing fixed it on the same day by making cookie headers count against LimitRequestFields. The issue was assigned CVE-2026-49975." 2026-06-05T06:41:11Z https://b.hatena.ne.jp/strawberryhunter/20260605#bookmark-4788249396470643202 テストした5つの実装で横断的に脆弱性があったと。「But when five independent implementations all read that section and still ship the same class of bug, the defect is in the spec.」そうね。 2026-06-05T05:59:30Z 未分類 https://b.hatena.ne.jp/toaruR/20260605#bookmark-4788249396470643202 2026-06-04T15:04:19Z セキュリティ web制作 https://b.hatena.ne.jp/misshiki/20260604#bookmark-4788249396470643202 CodexがHTTP/2 Bombを発見。HPACKの1-byte indexed referenceとzero-byte flow-control windowを組み合わせ、nginx、Apache、IIS、Envoy、PingoraでDoSを誘発。ApacheではCVE-2026-49975。 2026-06-04T09:51:10Z Codex セキュリティ https://b.hatena.ne.jp/aosiro/20260604#bookmark-4788249396470643202 こんなんいっぱいあるんやろな 2026-06-04T06:09:32Z https://b.hatena.ne.jp/lyiase/20260604#bookmark-4788249396470643202 2026-06-04T03:02:38Z あとで読む https://b.hatena.ne.jp/momonga_dash/20260604#bookmark-4788249396470643202 2026-06-04T02:56:46Z https://b.hatena.ne.jp/heroheat/20260604#bookmark-4788249396470643202 2026-06-04T02:15:22Z あとで読む https://b.hatena.ne.jp/fumikony/20260604#bookmark-4788249396470643202 2026-06-04T01:09:56Z https://b.hatena.ne.jp/poad1010/20260604#bookmark-4788249396470643202 2026-06-04T01:08:47Z HTTP Web標準 ブラウザ最新動向 コード生成AI techfeed https://b.hatena.ne.jp/yoshioka627/20260604#bookmark-4788249396470643202 2026-06-04T00:34:33Z あとで読む https://b.hatena.ne.jp/ninedragon/20260604#bookmark-4788249396470643202 2026-06-04T00:04:09Z あとで読む https://b.hatena.ne.jp/shunutsu2-2-24/20260604#bookmark-4788249396470643202 2026-06-03T23:57:47Z あとで読む https://b.hatena.ne.jp/morioka/20260604#bookmark-4788249396470643202 2026-06-03T23:47:15Z あとで読む https://b.hatena.ne.jp/macm/20260604#bookmark-4788249396470643202 2026-06-03T23:38:41Z あとで読む https://b.hatena.ne.jp/mstk_knife/20260604#bookmark-4788249396470643202 2026-06-03T23:36:38Z あとで読む https://b.hatena.ne.jp/fuji_haruka/20260604#bookmark-4788249396470643202 2026-06-03T23:17:50Z https://b.hatena.ne.jp/peketamin/20260604#bookmark-4788249396470643202 2026-06-03T23:14:51Z https://b.hatena.ne.jp/advblog/20260604#bookmark-4788249396470643202 2026-06-03T23:14:44Z https://b.hatena.ne.jp/nodat/20260604#bookmark-4788249396470643202 2026-06-03T22:57:47Z https://b.hatena.ne.jp/okaduka_takayuki/20260604#bookmark-4788249396470643202 2026-06-03T22:54:10Z https://b.hatena.ne.jp/yasuhiro1212/20260604#bookmark-4788249396470643202 2026-06-03T22:52:43Z あとで読む https://b.hatena.ne.jp/nguyen-oi/20260604#bookmark-4788249396470643202 人間が10年間気づかなかったゼロデイの組み合わせをAIが発見したの、地味にセキュリティ界のパラダイムシフトでは。パッチ当てなきゃ 2026-06-03T22:03:17Z https://b.hatena.ne.jp/pekee-nuee-nuee/20260604#bookmark-4788249396470643202 もー最近セキュリティ更新多すぎてだるすぎ😩 2026-06-03T22:01:26Z https://b.hatena.ne.jp/moonblogger/20260604#bookmark-4788249396470643202 2026-06-03T21:52:03Z AI セキュリティ Codex https://b.hatena.ne.jp/chatwark/20260604#bookmark-4788249396470643202 2026-06-03T16:20:50Z U0XUSL2MR https://b.hatena.ne.jp/y-teraoka/20260604#bookmark-4788249396470643202 2026-06-03T15:37:56Z https://b.hatena.ne.jp/knjname/20260603#bookmark-4788249396470643202 2026-06-03T10:08:39Z