Open source foundations unite on common standards for EU’s Cyber Resilience Act

Seven major open source foundations (Apache, Blender, Eclipse, OpenSSL, PHP, Python, and Rust) announced a Brussels-led collaboration, spearheaded by the Eclipse Foundation, to align and document security best practices and develop common specifications to meet the EU Cyber Resilience Act’s requirements by 2027; the initiative addresses prior concerns about open source liability, standardizes processes such as coordinated vulnerability disclosure and peer review, and prepares the software supply chain for heightened regulatory scrutiny.