European Union Agency for Cybersecurity (ENISA)

Force in Play

Coordinating information-sharing across member states

In August 2026, refrigerators failed at U.S. military commissaries. Attacks then hit hundreds of French supermarkets in October and spread in early November to stores in at least eight European countries, including Italy, Sweden and Belgium.

Updated 3 days ago

Rule Changes

As of May 2026: Operating Single Reporting Platform from September 2026

For decades, software companies shipped code with security flaws and faced little legal consequence, but on September 11, 2026, that changes for any product sold in Europe. The Cyber Resilience Act requires manufacturers to report actively exploited vulnerabilities within 24 hours, maintain software bills of materials listing every component in their products, and provide security updates for the product's lifespan.

Updated May 27