---
id: 5716
title: "Case study: How Burp AT helped expose whistleblower reports via a critical vulnerability that was overlooked for years"
source_domain: portswigger.net
source_url: "https://portswigger.net/blog/case-study-how-burp-at-helped-expose-whistleblower-reports-via-a-critical-vulnerability-that-was-overlooked-for-years"
published_at: "2026-08-04T14:45:31Z"
tags: ["ai-security", "pentesting", "agentic-ai", "burp-suite", "data-exposure", "web-security", "penetration-testing", "case-study", "portswigger"]
phying_url: "https://phying.com/item/5716"
lang: en
---

# Case study: How Burp AT helped expose whistleblower reports via a critical vulnerability that was overlooked for years

## Summary

A case study of Burp AT analyzing 66,000 lines of minified JavaScript on a timeboxed engagement, uncovering a path to leak confidential whistleblower reports protected only by brute-forceable codes.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2026-08-04T14:45:31Z
- **Original:** https://portswigger.net/blog/case-study-how-burp-at-helped-expose-whistleblower-reports-via-a-critical-vulnerability-that-was-overlooked-for-years
- **Phying News:** https://phying.com/item/5716