7 min read
The Cyber Resilience Act is now in force: what your team needs running since September 11
Since September 11, 2026, if you sell software in the EU and discover an actively exploited vulnerability, you have 24 hours to report it. You can't report what you can't detect — and the fine for failing to do so reaches €15 million.