Security Pros Warn That EU’s Vulnerability Disclosure Rule Is Risky

The Cyber Resilience Act’s requirement to disclose vulnerabilities within 24 hours could expose organizations to attacks — or government surveillance.