- Engineer — Plan: Software vendors shipping into the EU must have accurate SBOMs and timestamped vulnerability discovery records to meet the 24-hour exploitation-reporting window; audit your bill-of-materials completeness and disclosure tracking processes against the September 11 deadline.
- SOC/IR — Skip
- Leader — Act: EU CRA vulnerability reporting requirements take effect September 11 — if your company ships software to EU customers, confirm this week whether you qualify under the act and that your disclosure and legal teams have a process to meet the 24-hour reporting window for actively exploited flaws.