PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

What You Need to Know About the EU’s Cyber Resilience Act

hackerone.com | blog | #bug-bounty | #compliance | #vulnerability-disclosure | #eu | #regulation | #product-security | #cyber-resilience-act
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

The EU is adopting the Cyber Resilience Act, which will bring pivotal changes to product cybersecurity in Europe, the United States, and globally.
Published
Collected

Related coverage

blog · aikido.dev
Cyber Resilience Act is here! Myth busting and first impressions
Aikido Security's first impressions of the EU Cyber Resilience Act's first reporting deadline, covering the new Single Reporting Platform, its 24/72-hour and 14-day timelines, and compliance myths.
blog · yeswehack.com
EU Cyber Resilience Act: Manufacturers face 24-hour deadline to report actively exploited vulnerabilities
The EU CRA's vulnerability reporting rules took effect on 11 Sept 2026: makers of digital products must report actively exploited vulnerabilities within 24h, facing fines up to EUR 15M.
blog · hackerone.com
EU CRA Reporting Goes Live This Friday. Are You Ready?
The EU Cyber Resilience Act's mandatory reporting starts September 11: manufacturers must warn ENISA of exploited vulnerabilities within 24 hours, notify within 72, and then file follow-up reports.
blog · hackerone.com
European Council Adopts Cyber Resilience Act
The EU Council adopted the Cyber Resilience Act, requiring manufacturers to adopt coordinated vulnerability disclosure, patch promptly, report actively exploited flaws to ENISA, and provide SBOMs.
blog · about.gitlab.com
Prepare for the Cyber Resilience Act's 24-hour reporting deadline
From 11 September 2026, EU manufacturers must file 24-hour early warnings for actively exploited vulnerabilities, plus 72-hour and final reports; GitLab covers the ENISA/CSIRT process and detection.
blog · yeswehack.com
Cyber Resilience Act: compliance countdown set to start for EU law focused on eliminating vulnerabilities
Explainer on the EU Cyber Resilience Act: 36 months for vendors to meet vulnerability-focused rules, fines up to €15m or 2.5% of turnover, an SBOM mandate, and explicit backing for Bug Bounty.
Back