PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

The EU Cyber Resilience Act (CRA), explained

bugcrowd.com | blog | #compliance | #secure-by-design | #regulation | #legislation | #eu-cra | #product-security
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

An FAQ on the EU Cyber Resilience Act, which mandates secure-by-design digital products, covering hardware, software and components, with key compliance dates through December 2027 and global impact.
Published
Collected

Related coverage

blog · yeswehack.com
EU Cyber Resilience Act: Manufacturers face 24-hour deadline to report actively exploited vulnerabilities
The EU CRA's vulnerability reporting rules took effect on 11 Sept 2026: makers of digital products must report actively exploited vulnerabilities within 24h, facing fines up to EUR 15M.
blog · aikido.dev
Cyber Resilience Act is here! Myth busting and first impressions
Aikido Security's first impressions of the EU Cyber Resilience Act's first reporting deadline, covering the new Single Reporting Platform, its 24/72-hour and 14-day timelines, and compliance myths.
blog · certik.com
What Is the CLARITY Act?
What the CLARITY Act is, how it would split crypto oversight between the SEC and CFTC, where it stands in Congress, and what it means for crypto businesses.
blog · certik.com
U.S Legislation September Recap: Congress Blinked. The Regulators Didn’t.
We look at United States regulatory updates in September 2026, including the results of the CLARITY Act votes, updates on tokenized stocks, market structure guidance by the CFTC, and more.
blog · certik.com
CertiK Joins LF Decentralized Trust to Advance Security Standards for Enterprise Blockchain
CertiK joined LF Decentralized Trust, the Linux Foundation's enterprise blockchain community, to bring security expertise into shared open-source infrastructure as global regulation tightens.
blog · certik.com
From Warning Letters to Working Framework: CertiK and Brazil's Central Bank on Building the VASP Rulebook
CertiK's Jason Jiang and the Central Bank of Brazil's Nagel Paulino join Veirano Advogados' Marcos Rocha to trace Brazil's journey from early crypto warnings to a detailed VASP framework.
Back