A novel timing attack discovered against the npm’s registry API can be exploited to potentially disclose private packages used by organizations, putting developers at risk of supply chain threats

Programmers’ Digest 09/29/22-10/05/22: Fake Microsoft Exchange ProxyNotShell exploits for sale on GitHub, Vulnerability in Packagist PHP Repository, New Unpatched Zero-Day Microsoft Exchange Vulnerability And More

Researchers have disclosed a new severe Oracle Cloud Infrastructure (OCI) vulnerability that could be exploited by users to access the virtual disks of other Oracle customers