The EU Cyber Resilience Act (CRA) is forcing technology vendors to overhaul their vulnerability management and product security. New 24-hour mandatory reporting for exploited flaws means manual triage is no longer viable, demanding automation and
Under the new EU Cyber Resilience Act, manufacturers of digital products must report actively exploited vulnerabilities and significant security incidents within 24 hours.