MedTech Europe responds to the EU Cybersecurity Act consultation, highlighting key implications for medical device and IVD manufacturers, including certification, vulnerability management, and supply chain security.

ENISA releases NCAF 2.0, a new framework to assess EU cybersecurity capabilities, aligned with NIS2, CRA and DORA, with focus on risk, supply chain and incident response.

EU Delegated Regulation 2026/881 defines when cybersecurity vulnerability and incident notifications may be delayed under the Cyber Resilience Act.