HTTP/2, Brute! Then fall, server. Admin! Ops! The server is dead

On Tuesday, Netflix, working in conjunction with Google and CERT/CC, published a security advisory covering a series of vulnerabilities that enable denial of service attacks against servers running HTTP/2 services.

You can read the full article here.