Story thread · 5 reports / 5 sources

EU CRA Article 14 Hits Sep 11 — Every AI Agent Product Now Has a 24-Hour Disclosure Clock

forkast.news · 10dShare

Starting September 11, 2026, the regulatory landscape for AI developers shifts to a mandatory reporting schedule for actively exploited vulnerabilities. Under EU CRA Article 14, manufacturers of products with digital elements (PDEs) must adhere to a strict disclosure timeline for actively exploited vulnerabilities. This mandate applies to any entity placing such products on the EU […]

First report: Why Vulnerability Detection Isn’t Enough for the Cyber Resilience Act — sdtimes.com, 13d