---
id: 6715
title: "How Burp AT helped expose whistleblower reports via a critical vulnerability that was overlooked for years"
source_domain: portswigger.net
source_url: "https://portswigger.net/blog/how-burp-at-helped-expose-whistleblower-reports-via-a-critical-vulnerability-that-was-overlooked-for-years"
published_at: "2026-08-04T14:45:31Z"
tags: ["pentesting", "agentic-ai", "burp-suite", "vulnerability-disclosure", "portswigger", "javascript"]
phying_url: "https://phying.com/item/6715"
lang: en
---

# How Burp AT helped expose whistleblower reports via a critical vulnerability that was overlooked for years

## Summary

A customer story on how Burp AT, Burp Suite's agentic testing capability, helped Orange Cyberdefense analyst Ray Huygen work through 66,000 lines of minified JavaScript to find a critical access flaw that exposed confidential whistleblower reports, and turn the finding into a confirmed exploit.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2026-08-04T14:45:31Z
- **Original:** https://portswigger.net/blog/how-burp-at-helped-expose-whistleblower-reports-via-a-critical-vulnerability-that-was-overlooked-for-years
- **Phying News:** https://phying.com/item/6715