EU Cyber Resilience Act's Reporting Mandates Take Effect

Mandatory vulnerability and incident reporting requirements under the EU Cyber Resilience Act (CRA) are now in effect as of September 11, 2026. Manufacturers selling products with digital elements in the EU must comply, including providing an early warning within 24 hours of discovering an actively exploited vulnerability or serious incident. This aims to enhance cybersecurity for consumers and businesses within the EU.