Dec 4, 2026
The 24-Hour Clock: What the Cyber Resilience Act Means for Software You Can’t Patch
Since 11 September, manufacturers selling software or connected products in the EU have had 24 hours to warn the authorities about an actively exploited flaw, including in products already sold. For products built on unsupported components, hour one is the hardest. Here’s what you’d need to know, and how to rehearse it.