What we are reading in the Cyber Resilience Act, and what we think it means for people shipping software into the EU. Dated, sourced, and corrected in writing when we get something wrong.
AI has collapsed the cost of finding vulnerabilities. In Bitcoin's open-source ecosystem that collision arrived this month — and Brussels has set a clock on what happens next.
A draft amendment would push the CRA's vulnerability-handling standards later. Article 14 is unmoved — which leaves manufacturers documenting a duty whose yardstick is still being drafted.