ENISA published an updated FAQ on the CRA Single Reporting Platform, which includes valuable information concerning the procedures for reporting under Article 14 of the CRA. Notably, the FAQ includes the data fields to be filled in as part of the reporting (Q 16), as well as additional details on when further information will be made available.

ENISA published for consultation its second technical advisory on secure update mechanisms, designed to help micro, small, and medium-sized manufacturers understand common update lifecycle threats and implement practical controls to mitigate risks and ensure secure delivery. The public consultation window is open until 10 July 2026.

ENISA has opened a public review of a new draft version of the European Cybersecurity Certification Scheme on Common Criteria (EUCC) Agreed Cryptographic Mechanisms (ACM) document. The draft and the related survey is available here.

This edition of the ENISA NIS360 report is the third to assess the cybersecurity maturity and criticality of all sectors of high criticality as identified under Annex I of the NIS2 directive. The assessment covers the entire ecosystem of a sector, where each sector is understood to comprise relevant actors (i.e., national authorities, entities, EU bodies) and applicable rules (EU legislation).