Covers: Vulnerabilities & PatchingSupply Chain & AppSecIdentity & Access ManagementData BreachesAI SecurityEndpoint & Network SecurityCloud SecurityZero-Days & ExploitsGovernance, Risk & CompliancePrivacy
PortSwigger released Burp Suite Enterprise Edition 2025.2 on 10 March 2025, adding the ability to import API requests from Postman Collections so existing Postman-managed APIs can be imported and scanned for vulnerabilities. The release also improves how...
PortSwigger's BApp Store lists a Burp extension called Faraday, authored by Francisco Amato at version 2.9.1, that imports requests and issues from a Burp workspace into Faraday. The listing was last updated 11 March 2025, carries an overall system impact...
PortSwigger's BApp Store lists a TruffleHog extension for Burp Suite, authored by Truffle Security at version 1.0.0 and last updated 11 March 2025, that scans Burp traffic for 800+ types of secrets such as API keys, passwords and SSH keys. The extension...
PortSwigger integrated AI into Burp Suite after a November 2024 private trial with 30 testers across multiple segments, then moved the feature from trial to production. On 31 March 2025 the company released a set of built-in AI-powered features and...
AI HTTP Analyzer is a third-party Burp Suite extension, authored by Alperen Ergel and listed at version 2025.1.1 with a last update of 12 March 2025, that examines HTTP requests and responses for vulnerabilities such as SQL injection, XSS, and CSRF. It...
PortSwigger said it is expanding its community efforts in 2025 through its Discord server, which has over 8,000 members, and by sponsoring and attending security conferences and hackathons in England's South West, New York, Sheffield, and Rome, plus...
PortSwigger released Burp Suite Professional and Community 2025.1.5 as a stable build on Tuesday, 18 March 2025 at 08:21 UTC. The release upgrades Burp's browser to Chromium 134.0.6998.89 for Windows and Mac and 134.0.6998.88 for Linux. What's compelling:...
PortSwigger released Burp Suite Professional and Community 2025.2.2 as an Early Adopter release on Tuesday, 18 March 2025 at 08:23 UTC. The release upgrades Burp's browser to Chromium 134.0.6998.89 for Windows and Mac and 134.0.6998.88 for Linux. What's...
PortSwigger researcher Gareth Heyes documented how chaining round-trip attacks with namespace confusion in the ruby-saml library achieved unauthenticated admin access on GitLab Enterprise, exploiting the fact that REXML parses and validates the signature...
PortSwigger's BApp Store lists a third-party extension, version 1.1, that exports requests from Burp as Python scripts using the httpx library. The extension was last updated on 27 March 2025 and is installed through the BApp Store feature in Burp's...
PortSwigger's BApp Store lists a third-party Burp Suite extension called JSON Unicode-Escaper, version 0.2, by author Jeffrey Cap, last updated 27 March 2025, which provides UTF-8 JSON Unicode-escaping and unescaping as defined in RFC 8259 Section 7. The...
PortSwigger released Burp Suite Professional and Community 2025.2.3 on 31 March 2025, adding Burp AI features including Explore Issue, which autonomously investigates vulnerabilities found by Burp Scanner, and Explainer for AI-generated explanations of...
PortSwigger released Burp AI in Burp Suite Professional 2025.2, a set of five features built into the tool, with 10,000 free AI credits given to all Professional users. The features include Explore Issue, which follows up on scanner findings to validate...
PortSwigger released Burp Suite Professional/Community 2025.3 on 1 April 2025, adding Burp AI features including Explore Issue, which autonomously investigates vulnerabilities found by Burp Scanner by attempting exploits and identifying additional attack...
PortSwigger hosted its largest webinar to date in March with over 7,500 registrants, drawing on a pre-webinar survey of 582 AppSec professionals that cited time constraints, expanding attack surfaces, and signal-to-noise challenges as top pressures. The...
PortSwigger's BApp Store lists a third-party Burp Suite extension called 429 Bypasser, version 1.0, authored by Iliya and last updated 03 April 2025, built to help penetration testers circumvent HTTP 429 rate-limiting mechanisms. The extension applies...
PortSwigger's BApp Store lists a third-party extension called Sticky Burp, version 1.0.3, by Ads Dawson, last updated 03 April 2025, which lets users create and manage global per-project environment variables from highlighted text across Burp Suite tabs....
PortSwigger's BApp Store lists CVSS v3.1 Calculator, a Burp Suite extension by Asif Minhas, version 1.0, last updated 03 April 2025, that calculates CVSS v3.1 base scores through an interface for selecting metric values. PortSwigger states the extension is...
PortSwigger released Burp Suite Enterprise Edition 2025.3 on 3 April 2025, adding automatic Jira rules that can be applied to multiple sites and support for specifying Jira parents. The release also fixed several bugs and updated Java Runtime to 21.0.6 and...
PortSwigger released Burp Suite Professional and Community 2025.2.4 as a stable release on Monday, 7 April 2025 at 14:10 UTC, available as JAR, Linux (ARM and x64), macOS (Apple silicon and Intel), and Windows (ARM and x64) downloads. The release upgrades...
PortSwigger released Burp Suite Professional and Community 2025.3.1 as an Early Adopter build on Monday, 7 April 2025 at 14:13 UTC. The release upgrades Burp's embedded browser to Chromium 135.0.7049.42 on Windows and Mac and 135.0.7049.52 on...
A Burp Suite BApp extension by August Detlefsen, version 1.1 and last updated 09 April 2025, lets users paste cURL commands into a new Repeater tab, where the command is parsed into a raw HTTP request. PortSwigger notes the extension is written by a third...
PortSwigger published a Q&A following its webinar The Future of AppSec, which drew thousands of live viewers and hundreds of questions. The answers cover the renaming of Burp Suite Enterprise Edition to Burp Suite DAST, API scanning support for OpenAPI,...
PortSwigger's BApp Store lists a Burp Suite extension called Distribute Damage, authored by James Kettle, that adds a per-host throttle, a global pause button, and a context menu for triggering scans so Burp spreads load across multiple scanner targets....
PortSwigger released Burp Suite DAST Enterprise Edition 2025.3.1 as a stable release on Monday, 14 April 2025 at 08:42 UTC. The release fixes two bugs: users with permission to create sites for specific folders can now enter authentication information when...
PortSwigger renamed Burp Suite Enterprise Edition to Burp Suite DAST, a change announced to over 7000 AppSec professionals at a recent webinar, with the product itself unchanged. The company said organizations evaluating DAST tools did not know it offered...
PortSwigger's BApp Store lists a third-party extension called AI Recon Assistant, authored by Fatih Tuzun at version 1.0 and last updated 15 April 2025. The extension uses Burp AI to analyze scoped HTTP traffic, identifying authentication mechanisms,...
PortSwigger's BApp Store lists Captcha Converter, a Burp Suite extension by Saadet Elif Tokuoglu, version 1.0, last updated 15 April 2025, that renders image data found in a response as a new tab in the response editor. The listing says it removes the need...
PortSwigger released Burp Suite Professional/Community 2025.3.2 on 17 April 2025, changing Burp Scanner so the audit phase runs in parallel with the crawl phase and reprioritizes the audit queue as new items are found. The release also adds Bambdas-powered...
PortSwigger released Burp Suite Professional / Community 2025.4 on 17 April 2025, adding a browser icon to the toolbar, removing the Search and Settings text labels, and moving an icon to the bottom of the side panel. The release also updates the Montoya...