Professional / Community 2025.3.2
Summary: PortSwigger released Burp Suite Professional/Community 2025.3.2 on 17 April 2025, changing Burp Scanner so the audit phase runs in parallel with the crawl phase and reprioritizes the audit queue as new items are found. The release also adds Bambdas-powered custom actions to Burp Repeater (Professional only), a refreshed BApp Store with Featured, Recently updated, and PortSwigger created filters, Montoya API updates including JSON parameter editing and custom hotkeys, and an upgrade to Chromium 135.
Bottom line: Burp Scanner now begins auditing as soon as the first audit item appears during the crawl, so findings can surface earlier in large or complex applications rather than waiting for crawling to finish.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026