11 September 2026: the Cyber Resilience Act's reporting obligations start applying. Manufacturers of products with digital elements must report actively exploited vulnerabilities and severe incidents,
11 September 2026: the Cyber Resilience Act's reporting obligations start applying. Manufacturers of products with digital elements must report actively exploited vulnerabilities and severe incidents, with an early warning inside 24 hours. Telecom equipment is in scope, and detecting exploitation of your own product inside someone else's network is the hard part. https://www. p1sec.com/services/su