As concerned cybersecurity experts who have dedicated our lives to improving the security of the online environment, we urge you to reconsider the vulnerability disclosure requirements under the proposed EU Cyber Resilience Act (CRA). While we appreciate the CRA’s aim to enhance cybersecurity in Europe and beyond, we believe that the current provisions on vulnerability disclosure are counterproductive and will create new threats that undermine the security of digital products and the individuals who use them.
Download Full Text Below
Read Next
UNGA Takeaways: Digital Sovereignty Without Digital Isolation
A central theme emerged across the conversation: greater digital sovereignty does not have to mean greater digital isolation.
Whitepaper on Coordinating Vulnerability Response in the Age of AI
The report highlights that open-source software faces particularly acute coordination challenges due to fragmented ownership and limited maintainer resources, compared to the more centralized response model in proprietary software.
Event Recap: LATAM CISO Summit 2026 Brings Together Cybersecurity Leaders from Across the Americas
The 2026 Summit demonstrated both the scale of the cybersecurity challenges facing the Americas and the growing willingness of leaders across the region to address them collaboratively.
