PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

EU CRA Reporting Goes Live This Friday. Are You Ready?

hackerone.com | blog | #compliance | #eu | #regulation | #enisa | #cra | #vulnerability-reporting
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

The EU Cyber Resilience Act's mandatory reporting starts September 11: manufacturers must warn ENISA of exploited vulnerabilities within 24 hours, notify within 72, and then file follow-up reports.
Published
Collected

Related coverage

research · eshard.com
What does the EU Cyber Resilience Act (CRA) mean for connected device manufacturers?
The Cyber Resilience Act is a new legislation proposed by the European Commission to improve the cybersecurity posture of organisations using digital assets.
blog · hackerone.com
European Council Adopts Cyber Resilience Act
The EU Council adopted the Cyber Resilience Act, requiring manufacturers to adopt coordinated vulnerability disclosure, patch promptly, report actively exploited flaws to ENISA, and provide SBOMs.
blog · about.gitlab.com
Prepare for the Cyber Resilience Act's 24-hour reporting deadline
From 11 September 2026, EU manufacturers must file 24-hour early warnings for actively exploited vulnerabilities, plus 72-hour and final reports; GitLab covers the ENISA/CSIRT process and detection.
blog · bugcrowd.com
Overview of new cybersecurity regulations and their impact on businesses
Overviews incoming UK and EU cybersecurity regulations—PSTI Act, NIS2, DORA and the CRA—outlining compliance duties, steep fines for noncompliance, and their GDPR-scale impact on supply chains.
blog · hackenproof.com
Vulnerability Disclosure Policy: A Guide for Business Leaders
Explains what a vulnerability disclosure policy is and why the EU CRA and NIS2 now make it a compliance expectation, then walks through the key decisions behind each policy section, offering a free template for security and legal teams to adapt.
blog · aikido.dev
Cyber Resilience Act is here! Myth busting and first impressions
Aikido Security's first impressions of the EU Cyber Resilience Act's first reporting deadline, covering the new Single Reporting Platform, its 24/72-hour and 14-day timelines, and compliance myths.
Back