Professional / Community 2025.8

Summary: PortSwigger released Burp Suite Professional/Community 2025.8 on 7 August 2025, adding Burp AI to Repeater so users can run prompt-driven tasks from any Repeater tab and view a step-by-step log of actions and findings on the Dashboard. The release also makes Burp automatically recognize text/event-stream responses as streaming, adds SSE syntax highlighting and a default 600-second streaming timeout in Repeater, and ships a CLAUDE.md file and documentation for building Burp extensions with LLMs.
Why it matters: The tooling now lets a tester hand a suspicious request to an AI task and route the resulting traffic straight into Repeater or Intruder, so the AI's actions land in the same manual workflow your team already trusts. The 600-second default streaming timeout is the kind of setting that quietly shapes how long a session against an AI-powered application stays open.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026