New HTTP/2 MadeYouReset Vulnerability Enables Large-Scale DDoS Attacks

Security researchers have identified a new denial-of-service (DoS) vulnerability in HTTP/2 implementations, referred to as MadeYouReset (CVE-2025-8671). This discovery represents a notable escalation in the threats associated with web protocols. Publicly disclosed on August 13, 2025, this flaw allows attackers to bypass built-in concurrency limits, overwhelming servers with unbounded concurrent requests and potentially crashing systems […]

The post New HTTP/2 MadeYouReset Vulnerability Enables Large-Scale DDoS Attacks appeared first on Cyber Security News.