This is why we have nice things
Summary: Cisco Talos reported that the "Apache Killer" tool, released on Full-Disclosure the previous Friday, causes denial of service against Apache web servers through an overly long "Range:" header. Talos stated its http_inspect preprocessor already detected headers over 750 bytes via GID 119, SID 19 in the standard open source Snort configuration, and it added GID 1, SID 19825 to catch the specific malformed header the tool sends.
What's compelling: The Sourcefire corporate product ships with that long-header detection disabled by default, so organizations running it have no coverage against a tool that is readily accessible to the average attacker until someone turns the option on.
Read the original at Cisco Talos ↗
- Topics
- Endpoint & Network Security
- Related
- Adapting to AI penetration testing orchestrators: The Modern Security Model Cyber Risks · Nov 13, 2026Introducing Spend Management: Spending limits and alerts for Cloudflare Cyber Risks · Nov 13, 2026Choosing Que Paxa, an unusual consensus algorithm Cyber Risks · Nov 11, 2026