Professional / Community 2024.9

Summary: PortSwigger released Burp Suite Professional/Community 2024.9 on 1 October 2024, adding a redesigned Burp Intruder side panel for editing payload positions, payloads, and attack settings without switching tabs. The release also adds Bambda-based HTTP match and replace rules and SOAP API scanning in Burp Scanner, both limited to Burp Suite Professional, and updates Java from 21.0.4 to 22.0.2.
Bottom line: The same release notes warn that Burp's built-in browser remains unusable on Amazon Linux 2 since Chromium 127 in version 2024.6.4, and advise against running scans on that OS with 2024.6.4 or later - so teams scanning from Amazon Linux 2 need to confirm their platform before relying on results.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026