On June 3, 2026, researchers at Calif disclosed “HTTP/2 Bomb,” a denial-of-service technique reportedly found with OpenAI Codex that can exhaust memory on default HTTP/2 deployments of nginx, Apache httpd, Microsoft IIS, Envoy, and Cloudflare Pingora. The uncomfortable lesson is not that AI...