DAST without disruption: Burp Suite DAST winter update 2025
Summary: PortSwigger released a winter 2025 update to Burp Suite DAST that adds scan freeze windows, which automatically pause scanning during defined times such as deployment cycles, maintenance windows, and change freezes instead of requiring manual pausing or cancelling. The update also adds a recorded login editor for updating individual authentication steps, real-time screenshots and responses for diagnosing authentication failures, flexible XPath and CSS checks for confirming session state in JavaScript-heavy single-page apps, Postman collection imports with environment variables, and upfront flagging of OpenAPI definition issues before a scan runs.
Why it matters: The update targets the operational friction that stalls DAST at scale: fragile authentication that breaks authenticated scans when login flows change, and OpenAPI definition problems that can fail a scan before it begins, both of which force manual rework.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026