Security Pros Warn that EU's Vulnerability Disclosure Rule is Risky

The European Union’s Cyber Resilience Act’s requirement to disclose vulnerabilities within 24 hours of exploitation could potentially expose organizations to attacks from adversaries or government surveillance.