Press Releases

Security advisories and company news from Assured State Innovations: new vulnerabilities, active threats, and plain-language steps to protect your business.

EU Cyber Resilience Act Reporting Duties Now in Effect for Software and Device Makers, with Full Enforcement Set for December 2027

The EU Cyber Resilience Act (Regulation 2024/2847) is in effect: 24-hour vulnerability reporting began September 11, 2026, and full enforcement with CE marking follows December 11, 2027. U.S. companies selling into the EU are in scope.

EU Cyber Resilience Act Reporting Duties Now in Effect for Software and Device Makers, with Full Enforcement Set for December 2027 Read More »