Big Tech Urges Prioritization of Cyber Defense Ahead of EU Regulations

More than 100 organizations, including tech giants like OpenAI and Google, have signed an open letter urging businesses and governments to prioritize cyber defense. The signatories argue that cyber defense should become a top leadership priority, with companies fixing weaknesses in their own software and security firms defending against AI-enabled attacks.

The letter comes as the EU's Cyber Resilience Act takes effect on September 11, requiring manufacturers of products with digital elements to report actively exploited vulnerabilities and severe incidents within specific timeframes. This includes notifying national response teams and ENISA within 24 hours, followed by a full notification within 72 hours and a final report within 14 days of a fix.

Europe is not immune to cyber threats, as evidenced by the recent breach of the European Commission's security tool, which was used to protect itself. The signatories are urging governments and industry to coordinate efforts to improve cyber defense, with some companies already committing to share access, resources, and training with defenders of critical infrastructure.