Slow is a design principle, not a delay

Two things happened last week, one day apart, and almost nobody connected them.  On 11 September, the EU Cyber Resilience Act’s vulnerability reporting obligations came into force. Companies covered by the regulation now have to report actively exploited vulnerabilities within 24 hours and provide a fuller notification within 72.   On 12...