EU CRA 24-Hour Breach Rule Starts September 11

Starting September 11, the EU Cyber Resilience Act requires manufacturers to notify regulators within 24 hours of learning an actively exploited vulnerability, with a fuller report due in 72 hours. FossID's Aaron Branson says source-code analysis verifies SBOM accuracy for complex supply chains.