The EU Will Make You Report What It Hasn't Yet Made You Fix
EU Cyber Resilience Act reporting starts Sept. 11, requiring exploited vulnerability notices 15 months before its engineering rules apply.
More info