Cyber Risks · PortSwigger Research

The mystery of the missing Mac release

Summary: PortSwigger pulled the Mac distribution of Burp Suite 2021.10.2 after switching Macs to an archive-based update process that replaces the entire application folder, which deleted project files some users had saved inside it. The 2021.10.3 release returns to installer-based updates, checks for project files in the application folder, and refuses to update if any are present.

Key Takeaway: A routine packaging change wiped user data because the update replaced the whole folder rather than specific files - the kind of blast radius a security leader should weigh before any tooling migration touches where practitioners keep their work.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related