The general grandfathering rule that exempts pre-December 2027 products from most EU Cyber Resilience Act requirements does not apply to Article 14's vulnerability and incident reporting obligations

From the articleCrypto wallet creators now have just 24 hours to alert regulators when flaws are exploitedAlso in EU Cyber Resilience Act Goes Live: Manufacturers Now Face 24-Hour Deadline to Report Exploited Flaws