Professional / Community 2024.4.4

Summary: PortSwigger released Burp Suite Professional/Community 2024.4.4 on 23 May 2024, adding audit item prioritization, endpoint authentication configuration for API scans, and a new web cache deception scan check. The release also drops crawler requests to advertising and tracking domains, moves Burp to Java 21.0.2, and upgrades its built-in browser to 125.0.6422.60 for Linux, Windows, and MacOS.
What's compelling: The new web cache deception check targets a flaw where manipulated URL paths trick caches into serving dynamic content as static, exposing sensitive data to unauthorized users - a class of bug that sits in front of the application, not inside it.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026