Threat actors could leverage the novel HTTP/2 Continuation Flood denial-of-service attack technique to facilitate DDoS attacks more severe than record-breaking intrusions enabled by the Rapid Reset approach last year, according to SecurityWeek. All websites and APIs leveraging the HTTP/2 protocol could be disrupted by using the Continuation Flood method, which involves vulnerabilities in various implementations of the protocol, from a single machine, indicating a significantly greater threat than Rapid Reset, noted cybersecurity researcher Bartek Nowotarski, who discovered the attack technique.

Source: SC Magazine