ENISA has published its SBOM Adoption State of Play – 2026 report, providing insights into how organisations across Europe are implementing Software Bills of Materials (SBOMs) in response to the Cyber Resilience Act (CRA) and identifying key challenges affecting adoption.

MedTech Europe responds to the EU Cybersecurity Act consultation, highlighting key implications for medical device and IVD manufacturers, including certification, vulnerability management, and supply chain security.

ENISA releases NCAF 2.0, a new framework to assess EU cybersecurity capabilities, aligned with NIS2, CRA and DORA, with focus on risk, supply chain and incident response.

EU Delegated Regulation 2026/881 defines when cybersecurity vulnerability and incident notifications may be delayed under the Cyber Resilience Act.