Cyber Risks · PortSwigger Research

Professional / Community 1.7.14

Summary: PortSwigger released Burp Suite Professional/Community 1.7.14 on 13 December 2016, fixing security issues found through its bug bounty program. All the issues required a Burp user to actively test a malicious website designed specifically to attack Burp Suite, and the release also adds defense-in-depth hardening including some for Burp Collaborator.

Why it matters: The tool your testers point at hostile sites can itself be the target, and anyone running a private Burp Collaborator server is advised to update promptly.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related