The Risks and Controversy Surrounding EU’s Vulnerability Disclosure Rule
The EU‘s Controversial Vulnerability Disclosure Requirement Introduction The European Union (EU) has proposed a new rule under Article 11 of the Cyber Resilience Act (CRA) that would require software publishers to disclose unpatched vulnerabilities to government agencies within 24 hours of exploitation. While some IT security professionals support this rule, there is growing concern among…