Drupal.org vs The Linux Foundation

After the PHP security release: auditing your Drupal sites

Updating PHP closes the door, but it does not tell you whether anyone came through it first. With honeypot evidence of exploitation attempts from 17 October, four days before the fix was public, here is how the Drupal Association is auditing Drupal.org, and what our research suggests site owners should check on their own servers.

European firms urged to boost open source involvement for sovereignty

At the Open Source Summit Europe in Prague, organized by the Linux Foundation, speakers urged European companies to move from merely consuming open source software to actively contributing and participating in governance. A Linux Foundation survey found that over 90% of European organizations view digital sovereignty as strategically important, and that those with advanced open source governance achieve over four times return on investment versus 3.6 times for others. The EU's Tech Sovereignty Package and Cyber Resilience Act were cited as policy drivers. The summit also discussed AI agents, with GitHub data showing one in three pull requests now involve AI agents, and concerns about AI accuracy among developers. The event highlighted the need for European autonomy in technology development.

• Open Source Summit Europe took place in Prague, organized by the Linux Foundation.
• Linux Foundation survey: over 90% of European organizations consider digital sovereignty important.
• Organizations with advanced open source governance report >4x ROI vs. 3.6x for others.

Linux Foundation Europe Report: Digital Sovereignty Drives EU Tech Strategy

The Linux Foundation Europe released its fifth annual 'State of Open Source in Europe 2026' report, revealing that digital sovereignty is now central to European technology strategy. According to the report, 94% of organizations consider digital sovereignty important, with 61% deeming it very important. Organizations with advanced open-source governance report an average return on investment over four times their investment, compared to 3.6 times for those without formal governance. The report highlights that European developers contribute nearly 40% to foundational infrastructure projects like Kubernetes and OpenStack. However, significant challenges remain: 31% of organizations lack formal open-source governance, and while 94% use or test AI-based coding tools, there is pressure on managing open-source dependencies. The report also notes that 48% of organizations manage private forks, incurring high maintenance costs, and that the 2026 technology sovereignty package is expected to generate two billion euros in digital infrastructure investments.

• 94% of European organizations consider digital sovereignty important, with 61% rating it very important.
• Organizations with advanced open-source governance report average ROI over 4x their investment, vs. 3.6x for those without.
• European developers contribute nearly 40% to foundational projects like Kubernetes and OpenStack.

Open Secure AI Alliance Joins the Linux Foundation to Build a Shared, Open Defense Stack for the AI Era

Originally founded by dozens of enterprise leaders and NVIDIA, the Alliance moves to neutral governance to expand industry collaboration on open AI security tools, research and shared defenses.