Story thread · 6 reports / 6 sources

EU Cyber Resilience Act Goes Live: Manufacturers Now Face 24-Hour Deadline to Report Exploited Flaws

techtimes.com · 3dShare

EU Cyber Resilience Act reporting obligations are now live: manufacturers worldwide must report actively exploited vulnerabilities through ENISA's Single Reporting Platform within 24 hours, or face fines up to 15 million euros. The mandate covers every connected product already on EU shelves, including hardware shipped years before the regulation existed.

First report: The EU CRA's Real Question: What Shipped, and When Did You Know? — bleepingcomputer.com, 6d