PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Prepare for the Cyber Resilience Act's 24-hour reporting deadline

about.gitlab.com | blog | #gitlab | #compliance | #eu | #supply-chain-security | #vulnerability-reporting | #cyber-resilience-act
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

From 11 September 2026, EU manufacturers must file 24-hour early warnings for actively exploited vulnerabilities, plus 72-hour and final reports; GitLab covers the ENISA/CSIRT process and detection.
Published
Collected

Related coverage

blog · about.gitlab.com
GitLab and Claude Code: Fast, compliant AI
GitLab outlines how government agencies can adopt AI coding assistants without losing compliance. GitLab Duo Agent Platform governs Claude Code usage with policy controls, keeping development fast while satisfying regulatory requirements.
blog · hackerone.com
EU CRA Reporting Goes Live This Friday. Are You Ready?
The EU Cyber Resilience Act's mandatory reporting starts September 11: manufacturers must warn ENISA of exploited vulnerabilities within 24 hours, notify within 72, and then file follow-up reports.
blog · yeswehack.com
Cyber Resilience Act: compliance countdown set to start for EU law focused on eliminating vulnerabilities
Explainer on the EU Cyber Resilience Act: 36 months for vendors to meet vulnerability-focused rules, fines up to €15m or 2.5% of turnover, an SBOM mandate, and explicit backing for Bug Bounty.
blog · hackerone.com
European Council Adopts Cyber Resilience Act
The EU Council adopted the Cyber Resilience Act, requiring manufacturers to adopt coordinated vulnerability disclosure, patch promptly, report actively exploited flaws to ENISA, and provide SBOMs.
blog · hackerone.com
What You Need to Know About the EU’s Cyber Resilience Act
The EU is adopting the Cyber Resilience Act, which will bring pivotal changes to product cybersecurity in Europe, the United States, and globally.
blog · yeswehack.com
Let’s get the IoT landscape less vulnerable for all
Why the EU's proposed Cyber Resilience Act matters for IoT: mandatory cybersecurity requirements and coordinated vulnerability disclosure for connected products across their lifecycle.
Back