Burp AI - Burp Suite Now Integrate AI Powered Extension for Web Pentesting

“We’re starting by bringing AI-powered extensions to Burp Suite Professional giving you even more ways to integrate AI into your security testing! The ability to build AI-powered extensions is now available in Early Adopter 2025.2.” PortSwigger announced on Linkedin. Known for its dedication to pushing the boundaries of application security, PortSwigger has long been a leader in the field, with its Burp Suite Professional tool serving as a trusted companion for penetration testers worldwide. Burp AI, PortSwigger unveils AI-driven extensibility in Burp Suite Professional, revolutionizing the way security professionals approach application testing. By combining the power of AI with Burp Suite’s trusted platform, security professionals now have access to tools that can supercharge their workflows and uncover vulnerabilities more effectively than ever before. This new feature enables security testers to harness AI-powered extensions, opening up unprecedented possibilities for enhancing workflows, automating repetitive tasks, and uncovering deeper vulnerabilities in web applications. As a long-standing leader in application security, the company assures users that all interactions with its AI-powered features adhere to strict security standards. In its latest stride toward innovation, PortSwigger, the creator of the widely acclaimed Burp Suite, has announced the integration of artificial intelligence (AI) into its platform. PortSwigger recognizes that integrating AI into security tools raises important concerns about trust and data privacy. By leveraging AI through its purpose-built Montoya API, the company aims to empower security professionals with tools that were previously unimaginable using traditional code alone.

This Cyber News was published on cybersecuritynews.com. Publication date: Thu, 13 Feb 2025 19:20:32 +0000


Cyber News related to Burp AI - Burp Suite Now Integrate AI Powered Extension for Web Pentesting

Burp AI - Burp Suite Now Integrate AI Powered Extension for Web Pentesting - “We’re starting by bringing AI-powered extensions to Burp Suite Professional giving you even more ways to integrate AI into your security testing! The ability to build AI-powered extensions is now available in Early Adopter 2025.2.” ...
5 months ago Cybersecuritynews.com
Does Pentesting Actually Save You Money On Cyber Insurance Premiums? - Way back in the cyber dark ages of the early 1990s as many households were buying their first candy-colored Macintoshes and using them to play Oregon Trail and visit AOL chat rooms, many businesses started venturing into the digital realm as well by ...
1 year ago Securityboulevard.com Rocke
How workforce reductions affect cybersecurity postures - In its State of Pentesting Report, Cobalt reveals an industry struggling to balance the use of AI and protecting against it, while facing significant resource and staffing constraints. Pentesting plays a key role in addressing this challenge, ...
1 year ago Helpnetsecurity.com
5 Critical Steps to Prepare for AI-Powered Malware in Your Connected Asset Ecosystem - Voice synthesis has already been used in a few fake kidnap extortion attempts and possibly in one or two Business Email Compromise attacks as well, but that's about it. AI-powered malware represents a new frontier in the ever-expanding portfolio of ...
1 year ago Securityweek.com
Failing Upwards - One of the phrases my early boss in pentesting taught me and adopted was failing upwards in a career. This leads to hard decisions between hanging up part of your subject matter expertise and focusing on managing and leading teams or do you continue ...
1 year ago Blog.zsec.uk
CISOs Respond to Surge in AI-Powered Attacks with Advanced Defense Strategies - As AI becomes central to both attack and defense strategies, organizations must invest in building specialized expertise within their security teams. Unlike traditional attacks, which often rely on manual effort or simple automation, AI-powered ...
3 months ago Cybersecuritynews.com
Top 30 Best Penetration Testing Tools - 2025 - The tool supports various protocols and offers advanced filtering and analysis capabilities, making it ideal for diagnosing network issues, investigating security incidents, and understanding complex network interactions during penetration testing. ...
4 months ago Cybersecuritynews.com
Caido v0.47.0 Released - A Powerful Burp Suite Alternative Web Pentesting Tool - This release introduces a slew of exciting features, a revamped user experience, and critical bug fixes, further solidifying its place in the toolkit of security researchers and penetration testers. Shortly after the main release, Caido v0.47.1 was ...
4 months ago Cybersecuritynews.com
PortSwigger Scores Hefty $112 Million Investment - PortSwigger, the British company behind the popular Burp Suite pen-test utilities, has banked a massive $112 million investment after 16 years as a bootstrapped startup. The company said the capital was provided by Brighton Park Capital, a U.S. ...
1 year ago Securityweek.com
Malicious Chrome extensions can spoof password managers in new attack - In SquareX's demonstration, the attackers impersonate the 1Password password manager extension by first disabling the legitimate one using the 'chrome.management' API, or if the permissions aren't available, user interface manipulation tactics to ...
5 months ago Bleepingcomputer.com
SessionProbe: Open-source multi-threaded pentesting tool - SessionProbe is a multi-threaded pentesting tool designed to evaluate user privileges in web applications. It takes a user's session token and checks for a list of URLs if access is possible, highlighting potential authorization issues. It ...
1 year ago Helpnetsecurity.com
Palo Alto Networks and IBM to Jointly Provide AI-Powered Security Offerings - PRESS RELEASE. SANTA CLARA, Calif. and ARMONK, N.Y., May 15, 2024 /PRNewswire/ - Palo Alto Networks, the global cybersecurity leader, and IBM, a leading provider of hybrid cloud and AI, today announced a broad-reaching partnership to deliver ...
1 year ago Darkreading.com
Microsoft open-sources VS Code Copilot Chat extension on GitHub - GitHub Copilot Chat is an AI assistant extension for VS Code, allowing developers to chat with a GPT4-based model inside the editor to get help with coding tasks. With the Copilot Chat extension now publicly available on GitHub, developers are ...
1 month ago Bleepingcomputer.com
AI-Powered Phishing Detection - Does It Actually Work? - Unlike traditional methods that rely on identifying known threats, AI-powered systems analyze patterns and behaviors to detect anomalies indicative of phishing attempts. The rise of artificial intelligence (AI) has brought new hope to combating these ...
3 months ago Cybersecuritynews.com
New Polymorphic Attack That Mimic Any Chrome Extension Installed On The Browser - This newly discovered “polymorphic extension attack” creates pixel-perfect replicas of legitimate extensions’ icons, HTML popups, and workflows, making it nearly impossible for users to distinguish them from authentic extensions. ...
5 months ago Cybersecuritynews.com
CVE-2021-31892 - A vulnerability has been identified in SINUMERIK Analyse MyCondition (All versions), SINUMERIK Analyze MyPerformance (All versions), SINUMERIK Analyze MyPerformance /OEE-Monitor (All versions), SINUMERIK Analyze MyPerformance /OEE-Tuning (All ...
4 years ago
CVE-2017-18285 - The Gentoo app-backup/burp package before 2.1.32 has incorrect group ownership of the /etc/burp directory, which might allow local users to obtain read and write access to arbitrary files by leveraging access to a certain account for a ...
5 years ago
Week in review: Booking.com hotel booking scam, Kali Linux 2023.4 released - Advanced ransomware campaigns expose need for AI-powered cyber defenseIn this Help Net Security interview, Carl Froggett, CIO at Deep Instinct, discusses emerging trends in ransomware attacks, emphasizing the need for businesses to use advanced AI ...
1 year ago Helpnetsecurity.com
CVE-2024-34714 - The Hoppscotch Browser Extension is a browser extension for Hoppscotch, a community-driven end-to-end open-source API development ecosystem. Due to an oversight during a change made to the extension in the commit ...
1 year ago Tenable.com
10 Best Vulnerability Management Tools - 2025 - Its integration with other Tenable products and third-party tools enables a unified approach to vulnerability management, ensuring that security teams can quickly identify, prioritize, and remediate risks across their entire infrastructure. ...
1 month ago Cybersecuritynews.com
How To Use AI to Optimize DevOps - DevOps and AI make an inseparable pair and impact businesses of all kinds. While DevOps enables speedy product development and easier maintenance of existing deployments, AI transforms the overall system functionality. The DevOps team can rely on ...
1 year ago Feeds.dzone.com
A Tale of Overcoming Cyber Threats with Auto Pentesting and CTEM - She had preemptively purchased Ridge Security's RidgeBot automated penetration testing product, recently upgraded with new plugins that automatically detect and exploit the MOVEit vulnerability. RidgeBot is an AI-powered security validation platform ...
1 year ago Cyberdefensemagazine.com
Fortinet unveils networking solution integrated with Wi-Fi 7 - Fortinet announced a comprehensive secure networking solution integrated with Wi-Fi 7. Fortinet's first Wi-Fi 7 access point, FortiAP 441K, delivers increased speed and capacity, and the new FortiSwitch T1024 is purpose-built with 10 Gigabit Ethernet ...
1 year ago Helpnetsecurity.com
25 Best Managed Security Service Providers (MSSP) - 2025 - Pros & Cons: ProsConsStrong threat intelligence & expert SOCs.High pricing for SMBs.24/7 monitoring & rapid incident response.Complex UI and steep learning curve.Flexible, scalable, hybrid deployments.Limited visibility into endpoint ...
1 month ago Cybersecuritynews.com