Cyber Risks · PortSwigger Research

Enterprise Edition 2023.10

Summary: PortSwigger released Burp Suite Enterprise Edition 2023.10 on 16 November 2023, adding configuration options for CI-driven scans that let users specify upstream proxies and platform authentication information in the YAML file. The release also moves the Kubernetes Helm chart to a GitHub repository, adds support for pulling container images from authenticated private registries via the imagePullSecrets value, records CI-driven scan start and cancel actions in user action auditing, and upgrades Burp Scanner to version 2023.10.2.5.

Key Takeaway: CI-driven scans can now carry platform authentication details and route through upstream proxies, and every start or cancel is logged against the user who performed it - so the audit trail now ties automated scanning activity to a named person.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related