Enterprise Edition 2024.6

Summary: PortSwigger released Burp Suite Enterprise Edition 2024.6 on 16 July 2024, adding dedicated API scanning that lets users upload OpenAPI (Swagger) definition files or point to a live link that is re-fetched at each scan. The release also parses Basic, Bearer Token, and API Key authentication schemes from uploaded definitions, removes the deprecated scope field from the GraphQL API in favor of scope_v2, and adds verbose mode for CI-driven scans.
Key Takeaway: API sites can now be scanned without a scan configuration, while web app scans still require one, so the controls and review applied to web app scanning do not automatically carry over to the API surface a team adds.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026