Enterprise Tech

First Cyber Resilience Act reporting deadlines start to bite for hardware vendors

Manufacturers must now disclose actively exploited vulnerabilities within 24 hours of becoming aware.

Grace Nwosu

Enterprise IT Correspondent • 14 Jul 2026 • 5 min read

Team reviewing documents in a dimly lit meeting room — Disclosure timing is now a board-level question. Photo: Unsplash

Legal teams and product security groups are discovering they disagree about what awareness means. This story is developing and will be updated as our newsroom confirms further detail with affected organisations and responders.

#Regulation
#CRA
#Disclosure

Dark abstract network of glowing connection lines

Enterprise Tech

Major identity providers move to disable legacy authentication protocols by default

Administrators get a six-week grace period and a per-tenant exception process that expires in early 2027.

Grace Nwosu24 Jul 20265 min read

Macro photograph of a circuit board with blue lighting

Enterprise Tech

Post-quantum migration stalls on hardware security modules that cannot be upgraded

Security architects say the cryptographic inventory was the easy part. Replacing the hardware is not.

Tomas Berg20 Jul 20268 min read

Colourful source code displayed on a dark monitor

Enterprise Tech

Maintainer burnout reaches critical build tooling used across the enterprise stack

Downstream vendors are quietly funding forks rather than contributing upstream, fragmenting the ecosystem further.

Grace Nwosu18 Jul 20267 min read

First Cyber Resilience Act reporting deadlines start to bite for hardware vendors

Related Stories

Major identity providers move to disable legacy authentication protocols by default

Post-quantum migration stalls on hardware security modules that cannot be upgraded

Maintainer burnout reaches critical build tooling used across the enterprise stack