EU Cyber Resilience Will Reshape Global Product Security Standards
Subsea cables crossing into Europe now fall under same security rules as power grids, says European Commission's cybersecurity chief.
SAN FRANCISCO, March 24, 2026 — Artificial intelligence now drives virtually every social engineering attack targeting organizations across Europe, the EU's chief cybersecurity agency said Tuesday at the RSA Conference here, as the bloc moves to impose sweeping new product security requirements by September.
The remarks came as two major pieces of EU legislation rewrite the rules for any company selling products into European markets.
The Cyber Resilience Act, which sets mandatory security standards for any product with a digital component sold in the EU, takes effect in September 2026.
