EU mandates 24-hour vulnerability reporting for software providers

The EU has adopted a regulation requiring software providers, including those for smartphones and smart appliances, to report vulnerabilities within 24 hours. This marks a significant tightening of cybersecurity obligations, shifting from voluntary disclosure to mandatory rapid reporting. The regulation's scope and enforcement details remain to be clarified, but it will likely increase compliance costs and reshape vendor security practices across the bloc.