Professional / Community 2024.1.1

Summary: PortSwigger released Burp Suite Professional / Community 2024.1.1 on 26 January 2024, adding an Insertion points panel to Burp Scanner's Audit items tab that lists a request's insertion points in a tree view categorized as Detected, Moved, or Added, with nested insertion points shown hierarchically and each marked Pending, Audited, or Skipped. The release also adds native ARM64 builds for Windows, column reordering and hiding in Intruder and Proxy data tables, a search icon in the Professional tab bar, the reintroduced Target > Scope tab, GraphQL syntax highlighting and auto-indentation, a Start response timer column in HTTP history, and an upgraded built-in browser at 121.0.6167.85.
Key Takeaway: The Insertion points panel shows how much attack surface the scanner actually covered and which insertion points were Skipped, so a clean scan report can be read against what was never audited.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026