As cited
Copy frozen at (site build).
regulatory
EU cyber law won’t force fixes for fridge controllers hit in French attack
The EU's Cyber Resilience Act, which entered into force in September 2026, mandates vulnerability fixes and free updates only during manufacturer-defined support periods. This limitation means companies can avoid remediation obligations after ending support for a product, leaving older devices like industrial controllers exposed to known flaws.
Why it matters: Practitioners managing legacy and embedded devices (industrial fridges, controllers, and similar systems) should expect manufacturers to decline patches post-support, requiring teams to plan alternative mitigations or replacements for long-lived equipment.
- Source published
- First seen by Cybersecurity Tracker