4404 Founders·1d agoCRA Notified Body: Which Products Need OneFirewalls, hypervisors, smartcards and even anti-spam gateways cannot self-assess under the Cyber Resilience Act. The route, the paperwork and the que11 min read·404-founders.com
4404 Founders·1d agoCRA Single Reporting Platform: What ENISA's Form AsksThe fields, the clocks and the account model behind CRA Article 14 reports, two months after launch11 min read·404-founders.com
4404 Founders·Nov 5CRA and PCI DSS Overlap: Payment Terminals Are CriticalWhat a PCI-assessed payment product maker can reuse for the Cyber Resilience Act, and what it has to build from scratch12 min read·404-founders.com
4404 Founders·Oct 30AI Act Article 15: Cybersecurity Rules for High-Risk AIData poisoning, model poisoning, adversarial inputs: what Article 15 asks providers to resist, and what to test before 2 December 202710 min read·404-founders.com
4404 Founders·Oct 27CRA SBOM Requirements: What Software Manufacturers Must Document by December 2027What the CRA SBOM requirements ask of software manufacturers before the 11 December 2027 deadline, where the gaps still sit, and what to build now.11 min read·404-founders.com
4404 Founders·Oct 23EU AI Act Enforcement Is Live: What the First Probes SignalThe AI Office sent its first Article 91 requests to OpenAI and Anthropic. Here is what that means for every GPAI provider.10 min read·404-founders.com
4404 Founders·Sep 21NIS2 Article 21: 10 Minimum Security Measures ExplainedWhat Article 21 actually requires - mapped to specific technical controls, with the proportionality rule and board liability spelled out.9 min read·404-founders.com
4404 Founders·Sep 11CRA Article 14 Is Live: What "Actively Exploited" MeansCRA Article 14 reporting applies from 11 September 2026. How to distinguish active exploitation from CVEs, PoCs and exploit attempts, and build an auditable 24-hour reporting workflow.7 min read·404-founders.com
4404 Founders·Sep 11AI Act Article 50: What Machine-Readable AI Content Marking Has to ProveA technical readiness guide for the 2 December 2026 transition deadline8 min read·404-founders.com
4404 Founders·Sep 4CRA Secure by Default: What Manufacturers Need to Remove Before December 2027CRA Annex I makes secure-by-default configuration and attack-surface reduction product requirements from 11 December 2027. Build the evidence now.6 min read·404-founders.com
