InfoSecBulletin Cybersecurity for mankind
A new technique for launching distributed denial of service (DDoS) attacks has been discovered. It is identified as CVE-2023-44487 and has a high severity rating of 7.5. In addition, this vulnerability has been known to be actively exploited by threat actors in the wild.
YouTube geo-blocks at least 4 Bangladeshi TV channels in India
Microsoft Patches Four Critical Azure and Power Apps Vulns
Qilin Ransomware topped April 2025 with 45+ data leak disclosures
SonicWall Patches 3 Flaws in SMA 100 Devices
Top Ransomware Actively Attacking Financial Sector: 406 Incidents Disclosed
Critical (CVSS 10) Flaw in Cisco IOS XE WLCs Allows RRA
CVE-2025-29824
Play Ransomware Exploited Windows CVE-2025-29824 as Zero-Day
Hacker exploited Samsung MagicINFO 9 Server RCE flaw
CISA adds Langflow flaw to its KEV catalog
Google Fixes Android Flaw (CVE-2025-27363) Exploited by Attackers
CVE-2023-44487: HTTP/2 Rapid Reset
A threat actor could exploit this vulnerability by leveraging an HTTP/2 weakness, causing a Distributed Denial of Service on vulnerable Cisco devices.
HTTP/2 rapid reset is a type of attack that uses the efficiency of the HTTP/2 protocol to launch a DDoS attack.
A threat actor can make the client open many simultaneous streams on one TCP connection, with each stream corresponding to an HTTP request.
Click here to read the full article.
BD CIRT published CVE of f5, Apache, Juniper, Citrix and Atlassian
