EU Cyber Resilience Act Imposes 24-Hour Vulnerability Reporting for Tech Manufacturers

The European Union's Cyber Resilience Act (CRA) has initiated its mandatory requirements, compelling hardware and software manufacturers to report actively exploited vulnerabilities and severe security incidents within 24 hours of discovery. This regulatory change aims to enhance product security throughout its lifecycle and significantly impacts how tech companies manage and disclose cybersecurity risks within the EU market.