Intelligence

The EU's Cyber Resilience Act introduces mandatory cybersecurity reporting obligations for manufacturers of digital products starting September 2026, requiring notification of actively exploited vulnerabilities and severe incidents within strict timeframes. Companies must establish procedures to identify and report security events to national Computer Security Incident Response Teams, with potential fines reaching €15 million or 2.5% of global turnover for non-compliance.