The 24-hour CRA deadline is changing software supply chain visibility

According to an analysis published by The Hacker News, manufacturers of products with digital elements sold in the European Union will face a September 11 deadline under the Cyber Resilience Act (CRA) to notify regulators within 24 hours after learning that a vulnerability is being actively exploited, with a fuller report due within 72 hours. […] This story continues at The Next Web