Europa Posted on 2026-09-11 14:30:00

EU tightens cybersecurity - Companies must report attacks within 24 hours

From Edel Strazimiri

EU tightens cybersecurity - Companies must report attacks within 24 hours

The European Union has started implementing new rules on the cybersecurity of digital devices and software. From September 11, 2026, manufacturers are obliged to report actively exploited security vulnerabilities and serious incidents affecting their products.

The first notification must be submitted within 24 hours of discovering the problem, while a full report must be submitted within 72 hours. A final report is then required after measures have been put in place to correct or limit the risk.

The rules apply to all products with digital elements that are marketed in the EU, including devices already on the market. This category includes smartwatches, baby cameras, apps, software, door locking systems and other internet-connected devices.

The goal is for companies to react faster to attacks and vulnerabilities, while consumers and businesses have more protection against cyber threats.

The main obligations of the Cyber ​​Resilience Act will enter into force in December 2027, while the obligation to report vulnerabilities and incidents has been in effect since September 11, 2026.

 

Live TV

Latest news
All news

Most visited