EU CRA DEMANDS 24-HOUR VULNERABILITY REPORTS

The EU Cyber Resilience Act's vulnerability reporting requirements take effect September 11, requiring software vendors to disclose actively exploited flaws within 24 hours. Vendors must now prove exactly what shipped and when vulnerabilities were discovered.