On: As US vuln-tracking falters, EU enters with its own security bug database

[ta1243]

The is from a 2022 EU directive, well before recent US government actions, it's been developed for quite some time.

[OJFord → ta1243]

TFA doesn't hide or sensationalise that, makes the point that it's timely.

[ta1243 → OJFord]

However many people will infer causation from the timing. Half of people don't even read the full headlines any more.

[Kon-Peki → ta1243]

The EU Cyber Resilience Act, which is now in effect (but not fully enforced until 2027/2028), has additional details and also includes a reporting requirement (articles 14, 15, and 16).