DAST 2025.12
Summary: PortSwigger released a Burp Suite update on 16 December 2025 that adds scan freeze windows for automatically pausing and resuming scans, and lets users edit individual steps in a recorded login sequence instead of re-recording the whole flow. The release also adds scanning support for OpenAPI 3.1 and 3.2, OAuth 2.0 client credentials authentication with automatic token refresh, and reporting for the OWASP Top 10 2025 list.
What you should know: Expired credentials were a documented cause of scan failures, and the new OAuth 2.0 client credentials support refreshes tokens throughout a scan so server-to-server API and microservice testing does not break mid-run. Scan freeze windows also let teams pause testing automatically during maintenance or critical activity without losing the schedule.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026