EU begins 24-hour reporting obligation for security vulnerabilities

Under the Cyber Resilience Act, the EU requires manufacturers to report to authorities within 24 hours of discovering security vulnerabilities in products. Companies must respond quickly and maintain transparency, and must redesign risk management and compliance costs.

Why it mattersKeeping track of regulatory changes helps reduce legal risks from security gaps.