EU Cyber Resilience Act Reporting Rules Now Live: What Developers Must Know

·4 views

The EU Cyber Resilience Act's (CRA) mandatory vulnerability reporting obligations came into effect on 11 September 2026, applying to any developer or company that commercially supplies software or hardware to the EU market. Under Article 14, manufacturers must notify ENISA and the relevant national CSIRT within 24 hours of discovering an actively exploited vulnerability, follow up with a detailed notification within 72 hours, and submit a final report within 14 days of a fix being available. The rules apply equally to individual developers selling apps or games as to large corporations, regardless of where the seller is based. Commercially active is defined broadly to include paid products, ad-supported software, and data-monetised services, not just direct sales. Broader CRA requirements — including SBOM documentation, CE marking, and a minimum five-year security support period — do not take effect until 11 December 2027.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Couple Builds AI Trip Planner Escapo to Simplify Travel Itinerary Planning

A couple frustrated with the time-consuming nature of travel planning built Escapo, a web-based trip planning tool available at escapo.io. Users begin by answering a short questionnaire about their destination, travel dates, and preferences, after which the app generates a personalized day-by-day itinerary using real, named locations. The itinerary is geographically optimized, grouping nearby places together with smart timing to reflect a realistic daily plan. An interactive map lets users visualize the full trip, and the final itinerary can be exported as a PDF or as map pins for offline use. The tool is currently free to try and was designed with the goal of reducing trip planning from hours to just a few minutes.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Modal Labs Raises $355M Series C, Valued at $4.65B Amid AI Infrastructure Boom

Modal Labs, a San Francisco-based cloud infrastructure startup founded by Erik Bernhardsson, closed a $355 million Series C funding round led by General Catalyst and Redpoint Ventures in May 2026. The deal values the company at $4.65 billion, roughly four times its previous valuation. Modal offers a serverless, Python-optimized compute platform that lets developers deploy AI workloads at scale without managing Kubernetes clusters or Docker containers. The company targets data scientists, ML engineers, and AI researchers who need rapid access to GPU resources for tasks ranging from model fine-tuning to large parallel training runs. The funding surge reflects rising demand for scalable AI infrastructure, driven in part by the widespread adoption of AI coding tools that generate compute-intensive applications.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Munchable builds 450-word test suite to prevent silent gaps in food label scanning

Food app Munchable discovered its ingredient-scanning rules engine was returning 'not assessed' for common condition-relevant ingredients, including kefir for a lactose-intolerant user, soya for an IBS user, and tea for a reflux user. Each failure traced back to a missing alias rather than an absent rule, meaning the engine could not match a label's spelling to the rule it was supposed to trigger. To prevent recurrence, the team created a hand-maintained file of 450 label words grouped by dietary condition, covering FODMAP, lactose, GERD, IBD, and gastroparesis categories. Each word in the list is tested by walking the same canonicalisation and taxonomy path that a real product scan follows, ensuring the promise in the file reflects actual engine behaviour. A separate list of 15 everyday words such as water, salt, and sugar is also checked, to stop the app from flagging harmless ingredients as unassessed and drowning out genuinely important alerts.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How Munchable built an allergen system that can only warn, never falsely clear

Munchable, an app helping people with IBS or reflux assess supermarket products, expanded in September 2024 to also flag declared allergens. Unlike its dietary condition logic, the allergen layer is designed to only add warnings and never mark a product as allergen-free, since absence of data is treated as silence rather than safety. This rule is enforced at three levels — in code logic, in result structure, and in a TypeScript type that contains no value for 'absent'. The system covers all 14 EU and UK regulated allergens, a superset of the US 'big nine', so warnings are not lost when users travel across regions. Careful distinctions are also made to avoid false positives, such as not treating an inferred generic 'nut' tag as evidence of peanuts unless that word appeared on the physical label.

0 comments Read more at DEV Community