Professional / Community 2.1.07

Summary: PortSwigger released Burp Suite version 2.1.07 on 17 December 2019, which it says considerably improves Burp's SSL/TLS coverage by largely eliminating connection problems caused by server-side quirks and client-side Java bugs. Against the Alexa top 100,000 sites, Burp can connect to 1,696 sites that Chrome cannot and fails on only 125 that Chrome can, a gap the release attributes largely to Burp tolerating older and weaker protocols and ciphers to maximize connectivity.
What's compelling: A scanner that reaches 1,696 sites Chrome cannot is reaching them by accepting older, weaker protocols and ciphers, so the tool's coverage advantage rests on the same weak configurations an attacker would look for.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026