New Cyber Resilience Act Enforces Cyberattack Notifications and Heavy Sanctions
Article Content
- •The Cyber Resilience Act requires cyberattack notifications within 72 hours.
- •Fines for non-compliance can reach up to €15 million.
- •TM One launched TM Cydec to enhance organizational cyber resilience.
As of September 9, 2026, the Cyber Resilience Act mandates organizations to report cyberattacks within 72 hours or face fines up to €15 million. This legislation aims to enhance cybersecurity across sectors by ensuring timely disclosure of incidents. Organizations affected include those in critical infrastructure, finance, and healthcare. The Act also emphasizes the need for improved cyber resilience strategies. Additionally, TM One has introduced TM Cydec, a new service designed to bolster cyber resilience for organizations. The service aims to help businesses better prepare for and respond to cyber threats. The current status indicates that organizations are now under legal obligation to comply with these new regulations.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (35)
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host… 
Korean-speaking Hackers Target PHP Vulnerabilities in Global Campaign A cybersecurity report from Cyfirma reveals that attackers, possibly linked to North Korea's Lazarus group, are preparing to exploit critical vulnerabilities in PHP (CVE-2026-109618 and CVE-2026-109619). These vulnerabilities allow unauthenticated remote code execution, posing a significant threat to government…