Professional / Community 2025.10.1

Summary: PortSwigger released Burp Suite Professional/Community 2025.10.1 on 28 October 2025, adding smarter HTTP history filtering that hides binary files and static assets by default, a toggle between filtered and full history views, and color-coded HTTP methods in the site map. The release also adds Montoya API capabilities, an option to auto-reload extensions when their files change, bulk column copying from Burp tables, and updates Burp's Java version to 24.0.2.
Bottom line: The default HTTP history filter now suppresses binary files and static assets, so testers who never toggle to the full view may not see that traffic at all - a quiet change to what evidence a pentest actually reviews.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026