Professional 1.2.11

Summary: PortSwigger released Burp Suite Professional 1.2.11 on 10 June 2009, adding Burp Proxy options for configuring the server SSL certificates presented to the browser. The new default generates CA-signed per-host certificates from a unique self-signed CA created at installation, with alternatives for a fixed-hostname CA-signed certificate, a custom certificate, or the previous self-signed default.
Why it matters: The release notes state plainly that anyone holding the private key for a trusted root certificate can man-in-the-middle SSL connections without obvious detection, even when no intercepting proxy is running - which is why Burp generates a unique CA per installation and stores its key locally.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026