EU Cyber Resilience Act Reporting Obligations Take Effect, Strengthening Digital Product Security

New reporting obligations under the European Union's Cyber Resilience Act (CRA) have come into effect, requiring manufacturers of hardware and software products with digital elements to report actively exploited vulnerabilities and severe security incidents. Manufacturers must submit an early warning within 24 hours of awareness, followed by a full notification within 72 hours. This measure aims to enhance the cybersecurity of digital products and better protect consumers and businesses from cyber threats across the EU.