As concerned cybersecurity experts who have dedicated our lives to improving the security of the online environment, we urge you to reconsider the vulnerability disclosure requirements under the proposed EU Cyber Resilience Act (CRA). While we appreciate the CRA’s aim to enhance cybersecurity in Europe and beyond, we believe that the current provisions on vulnerability disclosure are counterproductive and will create new threats that undermine the security of digital products and the individuals who use them.

Download Full Text Below

Read Next

European Commission Announces New Action Plan To Confront Cybersecurity Challenges in the Age of AI

The European Commission released an Action Plan on Cybersecurity and AI, outlining how it intends to manage the growing cybersecurity risks associated with frontier AI models and strengthen Europe’s own AI-enabled cybersecurity capabilities.

Child Online Protection in Latin America

Digi Americas Alliance's latest report examines national approaches across six Latin American countries, highlights leading international frameworks, and offers recommendations to strengthen regional cooperation while respecting national differences.

Five Lessons from a Cross-Border Drone Attack Exercise

A tabletop exercise in Detroit underscores the national security risks to critical infrastructure and public spaces associated with drone attacks.