Stories by: Matthew Broersma

An OpenBSD developer has discovered and fixed a bug in the software that has been traced back to an AT&T version of Unix from 1975.

The Ruby programming language, which has become popular as the basis for web 2.0 sites such as Twitter, contains serious security flaws that could allow attackers to take over an organization's web server, according to the Ruby development team.

The Web sites of three of the security industry's best-known companies include security flaws that could be used to launch scams against customers, according to a new report.

Researchers at the U.S. National Institute of Standards and Technology (NIST) have demonstrated a technique that could make quantum cryptography significantly cheaper to implement, moving it nearer to possible commercial acceptance.

The majority of UK developers who do not already use open source licences for their products would do so if they had the choice, according to a new survey from Kingpin Intelligence.

Hackers now have their own social network, backed by GnuCitizen, a high-profile "ethical hacking" group.

Security researchers have discovered a complex spamming scheme that hijacks users' PCs in order to attempt to send junk mail via university and military systems.

A group of German researchers has unveiled the first publicly released research attempting to actively disrupt a peer-to-peer botnet - using as their case study the notorious Storm worm.

Linux is expanding its influence outside of the world of smartphones, and is poised to take a significant share of the mid-range mobile phone market as well, according to a new study from ABI Research.

Business travellers to Russia might want to keep their laptops and iPhones well-concealed - not from muggers, necessarily, but from the country's recently formed regulatory super-agency, Rossvyazokhrankultura (short for the Russian Mass Media, Communications and Cultural Protection Service).

A security researcher has uncovered a serious flaw in Google Spreadsheets, which could give an attacker access to all of a user's Google services.