The EU CRA's Real Question: What Shipped, and When Did You Know?
欧盟《网络韧性法案》漏洞报告要求将于 9 月 11 日生效，软件供应商需在最短时间内上报已利用的漏洞。ActiveState 指出，明确已知悉漏洞发现时间及具体发布版本是满足新规的关键。该法案规定供应商需在极短窗口期内（如 24 小时）报告活跃利用的缺陷。
SummaryAI generated
The requirements for reporting vulnerabilities under the EU’s “Network Resilience Act” will come into effect on September 11, imposing strict compliance obligations on software suppliers. The new regulations require suppliers to report exploited vulnerabilities within a very short window period (such as 24 hours). ActiveState notes that the key to meeting these regulations lies in clearly disclosing the specific time when the vulnerabilities were known and the version of the software that was affected.
Related eventsRELATED EVENTS
- 2026-09-06 08:00OpenAI plans to introduce a new transparency framework to disclose AI-related out-of-control incidents
- 2026-09-08 09:53The Ministry of Industry and Information Technology issued the “15th Five-Year Plan”: By 2030, a new generation of communication networks will be fully established, and 6G will be deployed.
- 2026-09-08 08:00Anthropic breaks from major tech group over chips
Key entitiesKEY ENTITIES
ActiveStateEU Cyber Resilience Act
Coverage · reports per dayLANGUAGE SPLIT
Entity relations
SignalsSIGNALS
Keyword heat