What's new in Burp Suite Professional: A year of innovation
Summary: PortSwigger shipped a year of Burp Suite Professional updates, including performance gains such as faster site map and table filtering, quicker scans with lower resource use, and faster display of large responses. The release also expanded Bambdas scripting with an output console and library, added web cache deception scan checks based on Martin Doyhenard's work, and improved the single-packet attack for detecting race conditions with small race windows.
What you should know: The scanner's improved single-packet attack and new web cache deception checks target vulnerability classes that are easy to miss, so teams relying on older Burp versions may be under-detecting race conditions and cache deception in their own applications.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026