EU AI Act The CRA’s 24-hour reporting deadline is closer than it looks The EU Cyber Resilience Act mandates 24-hour reporting for actively exploited vulnerabilities from September 2026