Copla CEO says CRA reporting duties already run year-round
He says early warnings must go out within 24 hours, including holidays, under fines of €15 million or 2.5% of turnover.
Stories per day · 30 days
2 RSS
Relatedenisa2copeland1danfoss1end-of-life1eu1eu-regulation1france1manufacturers1nis21patch-management1refrigeration1vulnerability-reporting1
15 stories, newest first · one card per story
Stories tagged #cyber-resilience-act
ENISA: 45% of surveyed EU IT providers take months to patch
The EU Cybersecurity Index averages 71.53, but ENISA says the figure is not comparable with 2024 and does not show supplier patch speed.
EU law will not force fixes for attacked end-of-life fridge controllers
Paris prosecutors put victims near 700 after French supermarket controllers were driven into a 50°C defrost.
1
CYBERFORT: A Compliance-Chain Platform Operationalising the Cyber Resilience Act for SMEs
CYBERFORT, an open-source platform, helps SMEs trace product risks to EU Cyber Resilience Act obligations and evidence.
EU Cyber Resilience Act ‘completely kills’ manual vulnerability triage
Experts say the EU Cyber Resilience Act’s 24-hour reporting clock makes manual vulnerability triage impractical.
3
EU Cyber Resilience Act requirements for containers and Kubernetes
The EU Cyber Resilience Act imposes SBOM, patching, and 24-hour exploit reporting duties on container and Kubernetes products.
1
Mind the Gap: How SBOM Specification Ambiguities Lead to Divergent Software Bills of Materials. An Empirical Tool Study
Empirical study of three SBOM generators across 3,000+ JavaScript and Rust projects finds systematic divergences caused by specification ambiguities, risking CRA non-compliance.
New Italian unicorn Exein rides the physical AI wave
Italian IoT-security startup Exein raised $270 million at a $1.7 billion valuation to build a security layer for physical AI and edge devices.
2
ENISA launched the CRA Single Reporting Platform for actively exploited vulnerabilities
ENISA launched the CRA Single Reporting Platform, making EU manufacturers report actively exploited vulnerabilities and severe incidents through one portal.
EU's Cyber Resilience Act starts the 24-hour vulnerability clock
EU Cyber Resilience Act reporting rules take effect, requiring manufacturers to disclose actively exploited vulnerabilities to ENISA within 24 hours, with fines reaching €15 million.
EU Cyber Resilience Act to Enforce New Reporting Requirements
EU Cyber Resilience Act reporting obligations begin Friday, requiring businesses to notify serious product security incidents within 24 hours.
How to secure hybrid meeting rooms without sacrificing user experience
Sponsored Barco piece, citing IDC data, says security is now the top videoconferencing purchase criterion as NIS2 and Cyber Resilience Act compliance pressures mount.
1
ETSI Proposes 17 Cybersecurity Standards to Support Cyber Resilience Act
ETSI has launched an approval process for 17 cybersecurity standards that vendors must meet under the EU Cyber Resilience Act.
Risky Bulletin: The EU publishes its upcoming cybersecurity standards
ETSI releases 17 draft cybersecurity standards vendors must meet when the EU Cyber Resilience Act takes effect in December 2027.
3
17 draft Cyber Resilience Act standards are open for comment
ETSI publishes 17 draft harmonised standards detailing EU Cyber Resilience Act compliance, open for comment until between mid-September and mid-November 2026.
4