The EU Cyber Resilience Act's first major obligations start on 11 September 2026. The 24-hour deadline turns vulnerability handling from a security task into an operating-model test.
The EU AI Act makes visible what strong software teams already need: inventories, boundaries, logs, review paths and clear responsibility for AI agents in real products and internal workflows.
The current AI Act discussion on X is a reminder that companies should not treat AI compliance as a late legal cleanup. It starts with product architecture, data flows and responsibility boundaries.