EU sets strict cybersecurity rules for digital products
The European Union is introducing the Cyber Resilience Act, requiring all hardware and software products sold in the region—and anything with a digital component—to comply with strict cybersecurity standards. The Act takes full effect in December 2027, with early reporting kicking in September 2026. Companies must be able to patch security issues, safeguard user data, and provide a complete list of their software components or risk fines and market bans.
- Covers all products with a software component
- Full compliance required by December 2027
- Early reporting begins September 2026
- Requires software to be updatable for security issues
- Mandates a "software bill of materials" for each product
Sources covering this
More in Cybersecurity
Report finds AI cybersecurity unpreparedness in enterprise
An October PwC survey of over 3,900 business and tech leaders in 71 countries found that half of security leaders see protecting AI as…
UK to tighten cyber defences as AI risks escalate
The UK's AI minister called for tougher safety standards from leading AI firms as the government plans to enhance national cyber…
Anthropic AI scanner finds 29,000 open source bugs
Anthropic's automated tool, powered by its Claude model, identified over 29,000 potential vulnerabilities across major open-source…
Malware exposes over 8 million karaoke customer records
A malware infection at Nippon Columbia, a contractor for Japanese karaoke giant Daiichi Kosho, potentially exposed personal data of more…