Copla CEO says CRA reporting duties already run year-round
He says early warnings must go out within 24 hours, including holidays, under fines of €15 million or 2.5% of turnover.
Stories per day · 30 days
2 RSS
5 stories, newest first · one card per story
Stories tagged #vulnerability-reporting
Preparing an AI-Augmented SIEM for the EU Cyber Resilience Act: A Practitioner Case Study
A practitioner case study maps AI-augmented SIEM SEUXDR to EU Cyber Resilience Act lifecycle and reporting duties.
ENISA launched the CRA Single Reporting Platform for actively exploited vulnerabilities
ENISA launched the CRA Single Reporting Platform, making EU manufacturers report actively exploited vulnerabilities and severe incidents through one portal.
Launching managed CRA Article 14 reporting for open source maintainers
EU Cyber Resilience Act Article 14 reporting obligations begin, requiring 24-hour exploit and incident reports; Patchstack launches managed compliance for open-source maintainers.
2
EU's Cyber Resilience Act starts the 24-hour vulnerability clock
EU Cyber Resilience Act reporting rules take effect, requiring manufacturers to disclose actively exploited vulnerabilities to ENISA within 24 hours, with fines reaching €15 million.