The CRA reporting clock starts on Thursday, and most summaries of it are wrong
From 11 September, a 24-hour reporting clock applies to actively exploited vulnerabilities — including in products you shipped years ago.
From 11 September, a 24-hour reporting clock applies to actively exploited vulnerabilities — including in products you shipped years ago.