DAST 2025.10.1
Summary: PortSwigger released DAST 2025.10.1 on 4 November 2025, adding the ability to pause running or queued scans and resume them later without losing progress, with multiple scans pausable at once from the Scans page. The release also extended the authentication status checker for recorded logins to support XPath and CSS selectors alongside plain text, added screenshot and HTTP response capture when the status checker fails, enabled editing of recorded logins, and let users assign CI-driven scans to specific folders.
What's compelling: Pausing scans lets teams sidestep maintenance windows and busy periods, but the more consequential change is authentication checking that can target a specific element like a "Log out" button - the difference between a scan that stays logged in against an SPA and one that quietly tests nothing.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026