Topic

ENISA: news, advisories and analysis

5 articlesUpdated 10 Oct 2026

CyberSecureToday covers ENISA across 5 articles published between 14 Sep 2026 and 10 Oct 2026. The coverage includes 5 analysis or guidance pieces.

Stories on ENISA most often intersect with Cyber Resilience Act, Compliance and Supply Chain Security, with Technology, Cloud & SaaS the most affected sector. The most recent story, “EU CRA Technical Standards Mandate Hardware Root of Trust and Vulnerability Deadlines”, was published 10 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

InsightsCloud & SaaS
EU CRA Technical Standards Mandate Hardware Root of Trust and Vulnerability Deadlines
The European Commission publishes harmonized technical standards for the Cyber Resilience Act, requiring hardware-based secure boot and 24-hour vulnerability notification.
Priya Raman10 Oct 20268 min read
InsightsCloud & SaaS
EU Cyber Resilience Act Enforces Mandatory Automated SBOMs and 24-Hour Flaw Disclosures for Connected Devices
The European Union Cyber Resilience Act enters critical enforcement phases, requiring hardware OEMs and software vendors to maintain machine-readable SBOMs and report actively exploited flaws within 24 hours.
CST Editorial Desk8 Oct 20268 min read
InsightsBanking & Fintech
EU NIS2 Directive 24-Hour Early Warning Mandate Enforced Across Critical Infrastructure Operators
The European Union's NIS2 Directive enforces strict 24-hour early warning notifications and executive liability for critical entities facing major cyber incidents.
CST Editorial Desk7 Oct 20268 min read
InsightsGov & Defence
EU NIS2 Directive Enforcement Mandates 24-Hour Incident Reporting and C-Suite Liability Across 18 Critical Sectors
The European Union enacts NIS2 Directive enforcement, establishing mandatory 24-hour incident notifications, personal C-suite liability, and strict supply chain audits.
CST Editorial Desk22 Sep 202617 min read
InsightsCloud & SaaS
EU Cyber Resilience Act 24-Hour Vulnerability Reporting Rules Take Effect for Vendors
The EU CRA’s early reporting mandate is now in effect, requiring manufacturers to report actively exploited vulnerabilities to ENISA and CSIRTs within 24 hours.
Tom Verhoeven14 Sep 20266 min read

Latest coverage

EU CRA Technical Standards Mandate Hardware Root of Trust and Vulnerability Deadlines

EU Cyber Resilience Act Enforces Mandatory Automated SBOMs and 24-Hour Flaw Disclosures for Connected Devices

EU NIS2 Directive 24-Hour Early Warning Mandate Enforced Across Critical Infrastructure Operators

EU NIS2 Directive Enforcement Mandates 24-Hour Incident Reporting and C-Suite Liability Across 18 Critical Sectors

EU Cyber Resilience Act 24-Hour Vulnerability Reporting Rules Take Effect for Vendors