The EU Cyber Resilience Act Has an EOL Problem — and the Deadline Isn't the One You Think
Everyone plans around the CRA's December 2027 date. The vulnerability reporting obligations start September 11, 2026 — and every end-of-life component in your product just became a regulatory liability, not just a security one.