Passive-aggressive scan checks
Summary: PortSwigger announced that Burp Scanner's passive checks will be replaced with "passive-aggressive" checks, framed as a way to push users toward fixing lower-severity issues found during passive browsing. The post says the change would reach Burp Suite's Stable release channel by midday on April 1st, and notes that marketing barred the team from being openly hostile to users.
Key Takeaway: The April 1st ship date and the joke premise are the tell: this is a prank post, so a security leader should not expect any actual scanner behavior change from it.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026