The EU Cyber Resilience Act’s 24-hour clock: reporting obligations six weeks in
Since 11 September, manufacturers selling into the EU must report actively exploited vulnerabilities within 24 hours. What the CRA requires, who is caught and what to do.
