Cyber Resilience Act: Reporting Obligations Come Into Force in September 202619. July 2026Cybersecurity, RegulationThe Cyber Resilience Act requires manufacturers to report security incidents within 24–72 hours starting September 2026, or face penalties up to 15 million euros. Share on: