AI and Tech Summaries - AI Weekly Malaysia

Summaries

Short AI and tech summaries with source links, signal scores, and why each update matters for builders, founders, and Malaysian tech workers.

Window

Today Yesterday This week Last week This month Last month All time

Showing 1-1 of 1 results

Date	Provider	Score	Summary
20 Aug 2026, 7:39 PM	The Hacker News	7.0	CDN Tsunami Attack Abuses HTTP/3 Translation for Up to 350x DoS Amplification Researchers disclosed 'CDN Tsunami,' two DoS attack techniques (HBA and HCA) that exploit how CDNs translate HTTP/3 client traffic into HTTP/1.1 requests to origin servers, achieving up to 350x bandwidth amplification on Alibaba/Baidu/Tencent and 36-51x on Cloudflare, CloudFront, and Fastly. All six tested CDNs were vulnerable to the bandwidth variant; Cloudflare alone was unaffected by the connection variant because it buffers the full request before connecting to origin. Baidu and Tencent confirmed and deployed fixes; no CVEs have been assigned and no in-the-wild exploitation is reported. Why: If your site sits behind Cloudflare, CloudFront, or Fastly with HTTP/3 at the edge, your origin server can be hit with 36-51x amplified traffic from a low-bandwidth attacker, and you cannot fix this at the origin — only the CDN can. Check whether your CDN provider has deployed mitigations and consider whether HTTP/3 at the edge is worth the exposure until patches roll out broadly. security cdn http3 dos infrastructure

Date

Provider

Score

Summary

20 Aug 2026, 7:39 PM

The Hacker News

7.0

CDN Tsunami Attack Abuses HTTP/3 Translation for Up to 350x DoS Amplification

Researchers disclosed 'CDN Tsunami,' two DoS attack techniques (HBA and HCA) that exploit how CDNs translate HTTP/3 client traffic into HTTP/1.1 requests to origin servers, achieving up to 350x bandwidth amplification on Alibaba/Baidu/Tencent and 36-51x on Cloudflare, CloudFront, and Fastly. All six tested CDNs were vulnerable to the bandwidth variant; Cloudflare alone was unaffected by the connection variant because it buffers the full request before connecting to origin. Baidu and Tencent confirmed and deployed fixes; no CVEs have been assigned and no in-the-wild exploitation is reported.

Why: If your site sits behind Cloudflare, CloudFront, or Fastly with HTTP/3 at the edge, your origin server can be hit with 36-51x amplified traffic from a low-bandwidth attacker, and you cannot fix this at the origin — only the CDN can. Check whether your CDN provider has deployed mitigations and consider whether HTTP/3 at the edge is worth the exposure until patches roll out broadly.