EU Cyber Resilience Act Reporting Obligations for Vulnerabilities and Incidents Begin

New obligations under the EU Cyber Resilience Act (CRA) have come into effect, requiring manufacturers of products with digital elements to report actively exploited vulnerabilities and severe security incidents within 24 hours of awareness. The EU Agency for Cybersecurity (ENISA) has launched its Single Reporting Platform to facilitate these notifications, marking a significant step towards a more coordinated EU approach to cybersecurity risk management.