HTTP/2 Bomb DoS Hits Every Major Web Server Stack

HTTP/2 Bomb DoS exploits default configs on NGINX, Apache, IIS, and Envoy. Plus Acer Wave 7 CVSS 10.0 zero-days and a VS Code GitHub token stealer.