Why 'Secure by Design' Is the New Standard for Open Source
Red Hat, Friday, October 9th, 2026
Red Hat says the EU Cyber Resilience Act makes secure-by-design practices essential for open source software.
Red Hat notes that the EU Cyber Resilience Act takes full effect December 11, 2027, and its first vulnerability and incident reporting obligations went live September 11, 2026.
Citing Linux Foundation research, it says 66% of companies remain unfamiliar with the CRA and only 41% expect full compliance by the deadline.
With an estimated 97% of code in most codebases coming from open source, the post outlines how organizations can understand their dependencies and prepare.