Professional / Community 2024.4

Summary: PortSwigger released Burp Suite Professional/Community 2024.4 on 29 April 2024, adding audit item prioritization, endpoint authentication configuration for API scans, and a new web cache deception scan check. The release also drops requests to advertising and tracking domains during crawling and upgrades Burp's built-in browser to Chromium 124.
What you should know: The new web cache deception check targets a flaw where manipulated URL paths trick caches into storing and serving dynamic content as static, exposing sensitive data to unauthorized users - a class of bug that sits in caching layers many teams never scan.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026