TECH NEWS
Silent HMAC Key Contamination: Uncovering a Logic Flaw in Burp's JWT Editor Extension
JWT Editor was shortlisted for “Best Auth & Access Control” in PortSwigger’s 2026 Burp Suite Extension Awards. This is the story of finding a silent bug inside it. Usually, when something goes wrong, your first instinct is to look at yourself. What did I do wrong? Which step did