CDN Tsunami Attack Abuses HTTP/3 Translation for Up to 350x DoS Amplification

Cybersecurity researchers have disclosed two denial-of-service (DoS) attacks that exploit how major content delivery networks (CDNs) convert client-facing HTTP/3 traffic into HTTP/1.1 requests to the websites they front, amplifying a low-bandwidth request stream by up to 350x against the origin server.The attacks, collectively named “CDN Tsunami,” were evaluated against Alibaba, Baidu,

First seen on thehackernews.com

Jump to article: thehackernews.com/2026/08/cdn-tsunami-attack-abuses-http3.html