Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

EU Cyber Resilience Act: Manufacturers face 24-hour deadline to report actively exploited vulnerabilities

yeswehack.com | blog | #bug-bounty | #compliance | #vulnerability-disclosure | #regulation | #product-security | #eu-cyber-resilience-act

Summary

The EU CRA's vulnerability reporting rules took effect on 11 Sept 2026: makers of digital products must report actively exploited vulnerabilities within 24h, facing fines up to EUR 15M.
Published
Collected

original ↗

Related coverage

blog · hackenproof.com
Vulnerability Disclosure Policy: A Guide for Business Leaders
Explains what a vulnerability disclosure policy is and why the EU CRA and NIS2 now make it a compliance expectation, then walks through the key decisions behind each policy section, offering a free template for security and legal teams to adapt.
blog · aikido.dev
Cyber Resilience Act is here! Myth busting and first impressions
Aikido Security's first impressions of the EU Cyber Resilience Act's first reporting deadline, covering the new Single Reporting Platform, its 24/72-hour and 14-day timelines, and compliance myths.
blog · yeswehack.com
‘People think I’m all about automation, but I only automate recon’: how rabhi became our all-time #1 Bug Bounty hunter
YesWeHack interviews Issam Rabhi, its all-time #1 bug bounty hunter, on his path from reverse engineering to top rankings, his recon-first automation methodology, favourite vulnerability types, notable finds, and advice for aspiring hackers.
blog · certik.com
CertiK Joins LF Decentralized Trust to Advance Security Standards for Enterprise Blockchain
CertiK joined LF Decentralized Trust, the Linux Foundation's enterprise blockchain community, to bring security expertise into shared open-source infrastructure as global regulation tightens.
blog · certik.com
Navigating "Regulation Crypto Assets": What the SEC's Proposed Framework Means for Web3 Projects
On 18 August 2026, the SEC proposed Regulation Crypto Assets: two conditional exemptions (a $5M startup runway and Tier 2 raises to $75M) plus a safe harbor from the 'investment contract' label.
blog · certik.com
From Warning Letters to Working Framework: CertiK and Brazil's Central Bank on Building the VASP Rulebook
CertiK's Jason Jiang and the Central Bank of Brazil's Nagel Paulino join Veirano Advogados' Marcos Rocha to trace Brazil's journey from early crypto warnings to a detailed VASP framework.
back