Professional / Community 2024.10.2

Summary: PortSwigger released Burp Suite Professional and Community 2024.10.2 on 25 November 2024, adding a streamlined Intruder layout with a customizable side panel, a combined scan launcher for web apps and APIs, SOAP authentication support, and partial scanning of OpenAPI 3.1.x definitions. The release also lets users customize which HTTP request headers are hidden in the message editor and upgrades Burp's browser to Chromium 131.0.6778.86 on Windows and Mac and 131.0.6778.85 on Linux.
What's compelling: OpenAPI 3.1.x support is only partial and limited to Burp Suite Professional, so definitions using specific 3.1.x features may not scan at all - teams standardizing on 3.1.x could carry untested API surface while believing their scanner covered it.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026