Regulation & LawCyber Resilience Act: The 24-Hour Clock Starts on September 11 — Long Before the Main RulesFrom September 11, manufacturers must report actively exploited flaws within 24 hours. Most other CRA duties arrive in 2027.September 8, 2026·6 min read▲—▼