Linux Foundation - Blog

The CRA Readiness Reality: What Changed (and What Didn’t) Between 2025 and 2026?

Angelah Liu — Fri, 19 Jun 2026 18:47:06 GMT

In 2025, Linux Foundation Research, Linux Foundation Europe, and Open Source Security Foundation (OpenSSF) published Unaware and Uncertain: The Stark Realities of Cyber Resilience Act Readiness in Open Source. It took a survey-based look at how prepared the open source ecosystem was for the European Union's Cyber Resilience Act (EU CRA). The headline finding was blunt: 62% of respondents had little to no familiarity with a regulation that would reshape how software gets built, shipped, and maintained across global supply chains. The hope was that with a year to go before the CRA enters into force, community education initiatives and a growing body of guidance would move the readiness needle.

Linux Foundation Newsletter: June 2026

andrewb@proximabiz.com (The Linux Foundation) — Thu, 18 Jun 2026 20:00:00 GMT

Welcome to the June 2026 edition of the Linux Foundation Newsletter

June is a big month for learning, certification, and career growth across the Linux Foundation community. The Prime Time to Save promotion is here, bringing massive opportunities for professional development with savings of up to 75% on vendor-neutral training, certifications, bundles, and subscriptions across Linux, cloud native, cybersecurity, AI, and more. Offer runs June 23–26.

Beyond education, this month’s newsletter highlights how open source is moving deeper into production systems across AI infrastructure, confidential computing, open network APIs, and automotive software. You’ll find updates on agentic AI deployments, landmark GDPR guidance, four critical open source surveys, open source safety certification, and a busy global events calendar.

Here are this month's Highlights:

LF Research fields critical surveys:
Pick one, pick two, or take them all; LF Research has four active surveys covering Generative AI and OSS Development, the 2026 State of OSPOs, AI Security, and the World of Open Source. You can also review two new reports on CRA readiness and Europe's tech talent. — Take the Surveys, Read New Reports

AAIF advances agentic AI infrastructure: The Agentic AI Foundation is growing rapidly, welcoming agentgateway as a hosted project and releasing goose v1.36.0 with a new hooks system. Meanwhile, the MLOps Community joins as an official affiliated user community. — agentgateway Hosted, goose v1.36.0 Release
Confidential Computing secures the AI era: Sweden's Data Protection Authority issued landmark GDPR guidance confirming TEEs as a technical safeguard in real operational deployments. The CCC also released the "3 Degrees of Confidential Computing" white paper and announced a new webinar on Agentic AI. — GDPR Guidance on TEEs, 3 Degrees of CC White Paper
Events season continues across the globe: LF communities are gathering worldwide with Open Source Summit Korea, the Confidential Computing Summit in San Francisco, and three flagship AGNTCon + MCPCon gatherings coming to Tokyo, Amsterdam, and San Jose. — Open Source Summit Korea, AGNTCon + MCPCon Fall Events

>> Read on for even more news, research, and opportunities from across the Linux Foundation.

AI, Open Source, and the Skills Imperative: Unpacking the 2026 State of Tech Talent Europe Report

Linux Foundation Europe — Tue, 09 Jun 2026 00:27:05 GMT

This blog was originally posted on June 8, 2026, on the Linux Foundation Europe website. The original can be found here: https://linuxfoundation.eu/newsroom/ai-open-source-and-the-skills-imperative-unpacking-the-2026-state-of-tech-talent-europe-report

Taking Stock of the State of European Cyber Resilience Act (CRA) Compliance: An Urgent Wake-up Call for the Open Source Ecosystem

Christopher Robinson — Wed, 03 Jun 2026 22:22:46 GMT

This blog post was originally posted on the OpenSSF blog on May 18, 2026. You can access the original here: https://openssf.org/blog/2026/05/18/taking-stock-of-the-state-of-european-cyber-resilience-act-cra-compliance-an-urgent-wake-up-call-for-the-open-source-ecosystem/

Navigating the 2026 Tech Talent Landscape: Why Upskilling Is Our Best Answer to the AI Skills Crisis

Hilary Carter — Tue, 26 May 2026 23:09:46 GMT

What’s the real story behind AI and IT staffing projections? Over the past year, mainstream headlines have frequently painted a grim picture of artificial intelligence systematically replacing the technical workforce. However, our newly released 2026 State of Tech Talent Report tells a fundamentally different and far more nuanced story.

TODO Group Launches New Working Group on Agentic AI to Empower Open Source Program Offices

andrewb@proximabiz.com (The Linux Foundation) — Tue, 19 May 2026 15:20:06 GMT

To explore AI agent workflows and the role of open source management

The TODO Group is launching a new Agentic AI to Empower OSPOs Working Group, a community-led effort for Open Source Program Office (OSPO) practitioners and open source management professionals to explore how AI agents are beginning to shape the day-to-day work of OSPOs.

Linux Foundation Newsletter: May 2026

andrewb@proximabiz.com (The Linux Foundation) — Wed, 13 May 2026 21:00:00 GMT

Welcome to the May 2026 edition of the Linux Foundation Newsletter.

May is a big month for learning, certification, and career growth across the Linux Foundation community. The first-ever Mega May Cyber Boost is here, bringing a little extra arcade energy to professional development with savings of up to 65% on vendor-neutral training, certifications, bundles, subscriptions, and instructor-led courses across Linux, cloud native, cybersecurity, AI, embedded systems, and more. Offer ends May 20.

Beyond education, this month’s newsletter highlights how open source is moving deeper into production systems across AI infrastructure, cloud native, energy, finance, cloud cost management, networking, digital trust, media, and safety-critical software. You’ll find updates on model inference, agent gateways, Kubernetes and observability, production energy systems, financial services infrastructure, responsible AI governance, and a busy global events calendar.

Here are this month’s highlights:

Training gets a May power-up: The first-ever Mega May Cyber Boost brings savings of up to 65% on Linux Foundation training, certifications, bundles, subscriptions, and instructor-led courses through May 20. Start with the full promotion or browse current training options — Mega May Cyber Boost, Linux Foundation Training
LF projects keep powering AI infrastructure: PyTorch Foundation project vLLM delivered Day 0 support for DeepSeek V4, while LF AI & Data’s Agentgateway crossed 5 million downloads since the start of the year, showing how LF-hosted projects are becoming part of the operating layer for open models, inference, gateways, and agentic workloads — vLLM + DeepSeek V4, Agentgateway 5M Downloads
Open source is showing up in industry infrastructure: Across energy, finance, and cloud cost management, LF communities are turning shared code into production systems, from TenneT’s 10× faster grid security analysis with PowSyBl to FINOS’s open source fabric for high-performance computing and FinOps X’s focus on AI, SaaS, data center, and token economics — TenneT and PowSyBl, This Week at FINOS, FinOps Foundation
Open infrastructure keeps expanding: Core projects continue to ship across cloud native, AI, networking, and observability, including Kubernetes v1.36, ONNX v1.21.0, eBPF security work, and practical migration guidance for modern platform teams. Read the latest releases and updates — Kubernetes v1.36, ONNX v1.21.0, eBPF Security Update
Events season is heating up: LF communities are gathering across North America, Europe, and Asia, with Open Source Summit North America, the LF AI & Data Mini Summit, FinOps X, the Open Source Policy & Ecosystem Forum, DPDK Summit, and AAIF’s AGNTCon + MCPCon events in Tokyo, Amsterdam, and San Jose. Mark your calendar — Open Source Summit North America, LF AI & Data Mini Summit, AGNTCon + MCPCon Fall Events

>> Read on for even more news, research, and opportunities from across the Linux Foundation.

Navigating the Agentic AI Guardrails: Why Open Source is the Key to AI in Regulated Industries

Hilary Carter — Mon, 20 Apr 2026 17:39:33 GMT

Last week, I had the pleasure of standing before a packed room at the Open Source in Finance Forum (OSFF), a FINOS-hosted event taking place (at long last!) in my home town of Toronto. The audience was filled with familiar faces from Canadian and global banks, and the burgeoning fintech ecosystem, including a few cryptoasset pioneers. I was reminded of my own roots in the financial services sector, which began with obtaining my securities license through our regulator, the Ontario Securities Commission, and how the intersection of technology and regulation shapes so many of the conversations and activities within FINOS, except on a global regulatory scale.

Linux Foundation Newsletter: April 2026

andrewb@proximabiz.com (The Linux Foundation) — Wed, 15 Apr 2026 18:00:00 GMT

Welcome to the March 2026 edition of the Linux Foundation Newsletter.

This month marks a watershed moment for the future of open source security with the launch of Project Glasswing, a landmark initiative designed to shield critical infrastructure at scale. We are also seeing the rapid maturation of the "Internet of Agents" following a packed-house MCP Dev Summit in New York, while the launch of the x402 Foundation establishes a new neutral home for universal payments. From the shift toward the PARK Stack and the iconic glider on stage at KubeCon Europe to the continued expansion of our silicon, energy, and cinematic foundations, open governance remains the definitive operating model for global innovation.

Here are this month’s highlights:

Project Glasswing: A $100M Defensive Shield for Open Source | In a major alliance with the Linux Foundation and leaders like AWS, Google, and Microsoft, Anthropic launched Project Glasswing. This initiative leverages the Claude Mythos frontier model to identify and automate the fixing of high-severity vulnerabilities across critical infrastructure. By addressing the "maintainer gap," Glasswing provides defenders with a durable, AI-driven advantage in cybersecurity. Watch the launch video and read Jim Zemlin’s post on why this matters >>
MCP Dev Summit North America Debuts to 1,200+ Registrants | The Agentic AI Foundation (AAIF) officially kicked off its 2026 event slate with the inaugural MCP Dev Summit in New York City. With a standing-room-only crowd, the event solidified the Model Context Protocol as the industry standard for agentic interoperability and served as the launchpad for a global series of 2026 summits across Europe and Asia. Explore the event recap >>
Linux Foundation Launches x402 Foundation for Universal Payments | With the contribution of the x402 protocol from Coinbase, the x402 Foundation has launched as the neutral home for a universal payments standard. Founding members including Stripe, Cloudflare, and Amazon Web Services are collaborating to build an interoperable future where AI agents and APIs can transact as seamlessly as they exchange data. Read the announcement >>
KubeCon Europe: Kubernetes Becomes the Platform for AI | Last month in Amsterdam, the cloud-native community demonstrated that Kubernetes is the definitive platform for the AI era. Amidst a record-breaking turnout and a full-sized glider on the keynote stage symbolizing the project's "lift" into AI infrastructure, the CNCF celebrated the industry-wide consolidation around the PARK Stack (PyTorch, AI, Ray, Kubernetes). Check out the glider talk >>

>> Read on for even more news, research, and opportunities from across the Linux Foundation.

Introducing Project Glasswing: Giving Maintainers Advanced AI to Secure the World's Code

jzemlin@linuxfoundation.org (Jim Zemlin) — Tue, 07 Apr 2026 18:07:23 GMT

In the late fall of 2025, artificial intelligence models made a big leap in coding ability. Since then, we have been hearing about a darker side of this breakthrough — how the new generation of AI models are also astoundingly good at identifying previously undiscovered software vulnerabilities. These discoveries are impacting some of the most security-hardened systems in the world. What’s more, the AI systems making these discoveries demonstrate incredible sophistication, often chaining together multiple vulnerabilities to generate more critical risks.