Cyber Risks · PortSwigger Research

Enterprise Edition 2024.9

Summary: PortSwigger released Burp Suite Enterprise Edition 2024.9 on 17 September 2024, adding two issue management features: accepted risk marking and severity adjustment. The release also lets users leave notes recording why each decision was made, which combined with the existing false positive option gives more control over managing security issues.

Bottom line: The release formalizes accepted risk and severity adjustment as tracked decisions with notes, so the reasoning behind each choice is recorded rather than left implicit - a security leader should expect those records to be read later as the audit trail for why a finding was not fixed.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related