Cyber Risks · PortSwigger Research

Professional / Community 2020.8

Summary: PortSwigger released Burp Suite Professional/Community 2020.8 on 6 August 2020, upgrading the web cache poisoning scan checks and adding minor improvements and bug fixes. The new checks identify recently discovered cache poisoning issues based on techniques James Kettle documented in his BlackHat USA 2020 presentation "Web Cache Entanglement: Novel Pathways to Poisoning."

Key Takeaway: The scanner's new detections trace directly to James Kettle's BlackHat USA 2020 research on novel poisoning pathways, so teams relying on older scan checks may be blind to the cache poisoning techniques presented there.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related