A-Team Systems, Emphere, DACHS IT GMBH, and JetBrains are the latest to join the foundation, reinforcing a push toward systemic, industry-wide collaboration. These new members aim to support the long-term sustainability of critical infrastructure projects, moving beyond isolated patching toward unified security frameworks. General Manager Steve Fernandez emphasized that the shift is essential to equip developers against increasingly rapid vulnerability discovery.

To assist with the mandatory requirements of the Cyber Resilience Act, the foundation published a practitioner's guide and a user journey map to help vendors transition policy analysis into technical action. A notable case study involving Ericsson demonstrated the effectiveness of this approach, with the company contributing over 1,400 security fixes upstream rather than maintaining private forks. Alongside these regulatory tools, the foundation released OpenBao v2.6 for secrets management and integrated the BOMHort tool into its sandbox to improve SBOM governance.