The last day of the four-day 25C3 congress in Berlin ended with an edge of suspense. In keeping with the theme of the congress, speakers had "nothing to hide" about well-known and new vulnerabilities in two of the most important Internet security protocols, SSH and SSL.

When a test kernel starts wrecking network cards, the community gets busy.

Dan Kaminsky, front man of the DNS attacks band the middle of 2008, has delivered a retrospective at the 25th annual Chaos Communication Congress (25C3) on the background and process of DNS vulnerability. But he also set his sights on the future. And outside-the-box thinker Dan J. Bernstein also had a thing or two to say.

The Germany based Chaos Computer Club (CCC) has opened its traditional annual conference in Berlin, Germany, again this year. After a year of breakdowns in data security, the hacker organization is calling for a number of new protective measures.

The Debian Project has released a sixth update for the current stable version of Gnu/Linux 4.0, codenamed Etch.

Bit9, self-professed leader in enterprise application whitelisting, recently included Mozilla's Firefox browser among "the Dirty Dozen" applications with critical security vulnerabilities. Mozilla's security expert Jonathan Nightingale disputes that critique.

Adobe recommends that Linux Flash Player users immediately upgrade to the newest versions.

The Mozilla project has moved both branches of its Firefox browser to versions 2.0.0.19 and 3.0.5. The updates deal primarily with security issues.