SBOM

EU Cyber Resilience Act Enforces Mandatory Automated SBOMs and 24-Hour Flaw Disclosures for Connected Devices

The European Union Cyber Resilience Act enters critical enforcement phases, requiring hardware OEMs and software vendors to maintain machine-readable SBOMs and report actively exploited flaws within 24 hours.