Burp On Tour 2025: bringing the App Sec community together around the world

Summary: PortSwigger's Burp On Tour 2025 traveled across continents to university campuses, grassroots meetups, and major security conferences to connect with students, hobbyists, practitioners, and researchers. At Black Hat USA in August, PortSwigger Director of Research James Kettle presented new research on the insecurity of applications relying on downstream HTTP/1.1, and the company unveiled new agentic AI capabilities in Burp AI, presented at HAC NYC, HAC LDN, and FOST Paris.
Why it matters: Kettle's research on deep systemic risks in HTTP/1.1 points at a protocol layer most teams treat as settled plumbing, and PortSwigger is now shipping agentic AI into the tooling testers use to probe it.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026