Copla CEO says CRA reporting duties already run year-round
He says early warnings must go out within 24 hours, including holidays, under fines of €15 million or 2.5% of turnover.
Stories per day · 30 days
2 RSS
Relatedcyber-resilience-act2danfoss1eu1eu-regulation1manufacturers1nis21patch-management1refrigeration1supermarkets1vulnerability-reporting1
14 stories, newest first · one card per story
Stories tagged #enisa
ENISA: 45% of surveyed EU IT providers take months to patch
The EU Cybersecurity Index averages 71.53, but ENISA says the figure is not comparable with 2024 and does not show supplier patch speed.
ENISA Warns of Cyberattacks on European Refrigeration Systems
Attacks on French supermarket refrigeration destroyed food stocks using Danfoss controllers.
1
EU Cyber Resilience Act requirements for containers and Kubernetes
The EU Cyber Resilience Act imposes SBOM, patching, and 24-hour exploit reporting duties on container and Kubernetes products.
1
Europe’s technology backbone is becoming a cyber target
ENISA’s 2026 report says DDoS and supplier compromises drove 8,257 EU cyber incidents in 2025.
OpenAI extends cyber access to Ukraine for civilian defense
OpenAI will give Ukraine Daybreak access to find and fix vulnerabilities in civilian infrastructure.
EU Auditors Warn Information-Sharing Gaps Are Hindering Cyber Incident Response
EU auditors criticize the bloc's cybersecurity strategy for critical information-sharing gaps hindering incident response.
1
Passwork NIS2 efficiency guide: Save your team hours before the 2026 audit
Passwork pitches its password manager as a faster path to NIS2 Article 21 access, MFA, and audit evidence.
ENISA: Frontier AI Is Changing the Speed of Cyberattacks. Europe Needs to Catch Up
ENISA warns frontier AI compresses attack lifecycles to minutes, with exploits possible within 15 minutes of disclosure and median 72-minute breach-to-exfiltration times.
5
ENISA launched the CRA Single Reporting Platform for actively exploited vulnerabilities
ENISA launched the CRA Single Reporting Platform, making EU manufacturers report actively exploited vulnerabilities and severe incidents through one portal.
Launching managed CRA Article 14 reporting for open source maintainers
EU Cyber Resilience Act Article 14 reporting obligations begin, requiring 24-hour exploit and incident reports; Patchstack launches managed compliance for open-source maintainers.
2
EU's Cyber Resilience Act starts the 24-hour vulnerability clock
EU Cyber Resilience Act reporting rules take effect, requiring manufacturers to disclose actively exploited vulnerabilities to ENISA within 24 hours, with fines reaching €15 million.
The EU CRA's Real Question: What Shipped, and When Did You Know?
ActiveState argues the EU CRA's 24-hour ENISA exploit-notification duty, effective September 11, 2026, makes current SBOMs and provenance visibility a legal necessity.
3
G7 Urges Fast-Track on Quantum-Safe Cybersecurity Rules
G7 cybersecurity agencies led by France's ANSSI urged accelerated transition to post-quantum cryptography, prioritizing critical systems and phased, risk-based migration.