ENISA Launches EU Platform for Cyber Resilience Act Security Reports

Summary

ENISA launched a platform for reporting actively exploited product vulnerabilities and severe incidents under the EU Cyber Resilience Act, enabling manufacturers to notify relevant authorities through a single channel.

Key points

• The Single Reporting Platform lets manufacturers report actively exploited vulnerabilities and severe incidents affecting products with digital elements through one channel.
• A designated national CSIRT receives each notification and shares it with relevant CSIRTs in other affected EU member states; ENISA also receives it.
• Manufacturers’ reporting obligations began on 11 September 2026. The article says obligations also apply to open-source software stewards involved in developing such products, with that provision applying from 11 December 2027.
• The platform is intended to support coordinated vulnerability and incident handling and faster action to mitigate risks.
• ENISA says the platform includes measures to protect the confidentiality of submitted information and provides guidance materials and a help desk.

People

Vendors

Products