A new DoS attack method, 'HTTP/2 Continuation Flood' or 'Rapid Reset', threatens internet safety by crashing servers with a single TCP connection.

The attack, exploiting HTTP/2 protocol frames, is particularly insidious as it leaves no trace in server logs and is difficult to detect and mitigate.

Over 60% of human internet traffic uses HTTP/2, indicating a significant impact potential for this newly discovered vulnerability.

CERT/CC is coordinating with tech giants and open source projects to responsibly disclose and address the vulnerability.

Immediate action is required from affected entities to upgrade software and libraries to prevent possible DDoS attacks utilizing this exploit.