The Hidden Vulnerability of The Open Source Software Supply Chain: The Underlying Infrastructure

Software supply chain veteran Brian Fox unpacks the security implications of the new EU Cyber Resilience Act and its profound impact on open-source projects. He reveals the hidden infrastructure risks threatening open-source projects and shares insights for senior software leaders navigating this regulatory landscape.

Read a transcript of this interview: bit.ly/46nxjUM

Subscribe to the Software Architects’ Newsletter for your monthly guide to the essential news and experience from industry peers on emerging patterns and technologies:
infoq.com/software-architects-newsletter

Upcoming Events:

InfoQ Dev Summit Munich (October 15-16, 2025)
Essential insights on critical software development priorities.
devsummit.infoq.com/conference/munich2025

QCon San Francisco 2025 (November 17-21, 2025)
Get practical inspiration and best practices on emerging software trends directly from senior software developers at early adopter companies.
qconsf.com

QCon AI New York 2025 (December 16-17, 2025)
ai.qconferences.com

QCon London 2026 (March 16-19, 2026)
qconlondon.com

The InfoQ Podcasts:
Weekly inspiration to drive innovation and build great teams from senior software leaders. Listen to all our podcasts and read interview transcripts:

- The InfoQ Podcast infoq.com/podcasts
- Engineering Culture Podcast by InfoQ infoq.com/podcasts/#engineering_culture
- Generally AI: infoq.com/generally-ai-podcast

Follow InfoQ:
- Mastodon: techhub.social/@infoq
- X: x.com/InfoQ?from=@
- LinkedIn: linkedin.com/company/infoq
- Facebook: facebook.com/InfoQdotcom#
- Instagram: instagram.com/infoqdotcom/?hl=en
- Youtube: youtube.com/infoq
- Bluesky: bsky.app/profile/infoq.com

Write for InfoQ: Learn and share the changes and innovations in professional software development.
- Join a community of experts.
- Increase your visibility.
- Grow your career.
infoq.com/write-for-infoq