EU's Cyber Resilience Act Sets 24-Hour Breach Reporting Rule
Beginning Friday, companies selling products in the EU must alert authorities within 24 hours of discovering serious security incidents affecting those products. The requirement is part of the Cyber Resilience Act, which imposes new cybersecurity obligations on manufacturers and vendors operating in the bloc.