Today’s lead:EU product-security reporting clock starts todayAdaptHealth breach scope reaches 4.1 million peopleCheck Point VPN flaws expose gateways and management serversLiteLLM defaults turn AI gateways into credential exposure paths
Front page · Daily intelligence
EU product-security reporting clock starts today
Manufacturers placing connected hardware or software on the EU market must now notify actively exploited vulnerabilities and severe product-security incidents through ENISA’s reporting platform.
By Security.io Intelligence Desk · Executive analysis
Article 14 reporting under the EU Cyber Resilience Act applies from today. Covered manufacturers need a defensible process for recognising a reportable indication, submitting the 24-hour warning, enriching it within 72 hours and coordinating subsequent reports without compromising investigation or3.
Why today: This leads because the materially new event is a fixed legal obligation taking effect on 11 September 2026, not another preparatory advisory. It outranks today’s incident and vulnerability stories by changing who must decide, what evidence must be…
“Name the accountable CRA reporting executive and two deputies.”
Decision owner: Chief product security officer with general counsel and the designated EU regulatory-reporting owner
Decision horizon: Today; reporting ownership and escalation thresholds must be operational before the first qualifying indication is received.
Article 14 reporting under the EU Cyber Resilience Act applies from today. Covered manufacturers need a defensible process for recognising a reportable indication, submitting the 24-hour…
Today’s action: Name the accountable CRA reporting executive and two deputies.
AdaptHealth’s earlier material-incident disclosure has been followed by reporting that 4,115,802 people were affected. The intrusion began with social engineering of a third-party contractor session and…
Today’s action: Review contractor authentication methods and active cloud sessions.
Check Point disclosed CVE-2026-85102 and CVE-2026-85103, two critical VPN certificate-processing vulnerabilities capable of unauthenticated remote code execution. CERT-EU now urges immediate hotfixing of affected perimeter and…
Today’s action: Inventory every affected Check Point appliance and release branch.
Wiz found 294 of 3,074 public LiteLLM instances in a point-in-time sample accepted the example master key or required no authentication. Older vulnerable versions could combine…
Today’s action: Discover every LiteLLM gateway across cloud and development accounts.
Treasury designated Xinbi Guarantee and two supporting technology companies, while DOJ reported more than US$52 million restrained across marketplace and vendor wallets. The action creates immediate…
Today’s action: Load the new designations into authorised sanctions-screening systems.
Signal desk
Interactive editorial evidence
Security.io editorial assessment
Morning decision pressure
Hover or tap a bar for its exact value and the editorial meaning behind it. Keyboard: focus the chart and use ↑ or ↓.
Scores are editorial comparisons, not externally measured risk ratings. Exposure reflects affected operating models; urgency reflects the decision window; consequence reflects plausible enterprise impact supported by the selected sources.
Hover or tap a point to see the story title, new references, cumulative evidence, source mix and why the story entered today’s edition. Keyboard: use ← or →.
This line shows cumulative cited references across the lead and four supporting briefs.