Bewerken EU's Cyber Resilience Act starts the 24-hour vulnerability clock Manufacturers must now disclose actively exploited flaws and severe security incidents through ENISA's new reporting platform