EU Cyber Resilience Act's 24-hour vulnerability reporting obligations take effect

Starting September 11, 2026, manufacturers of products with digital elements placed on the EU market must report actively exploited vulnerabilities and severe security incidents within 24 hours of awareness. This new regulation significantly changes operational requirements for companies, demanding rapid identification and notification of security events.