Unsecurity Episode 259: The Cyber Resilience Act, Open Source, & AI w/ Madalin Neag & CRob
Security researchers examine technical aspects of Unsecurity Episode 259: The Cyber Resilience Act, Open Source, & AI w/ Madalin Neag & CRob.
Summary
Podcast setup
On Unsecurity, Megan Lurkins hosts OpenSSF EU policy adviser Maline and CTO Christopher Robinson (Crob) to explain the EU Cyber Resilience Act for listeners unfamiliar with the regulation.
CRA scope and timeline
Maline describes CRA as broad horizontal legislation requiring secure-by-design digital products across their lifecycle, replacing narrower radio-equipment rules. Full applicability arrives 11 December next year with some obligations from 11 September this year, affecting any manufacturer placing products on the EU market regardless of headquarters.
Awareness gap
OpenSSF surveyed over one thousand companies and found sixty-six percent unaware of CRA despite imminent deadlines. Robinson notes open source underpins an estimated nine trillion dollars of economic value and that CRA codifies long-standing AppSec expectations—secure development, vulnerability handling, and accountability—now as law rather than voluntary guidance.
Related talks
Briefings·36 min
Rama Hoetzlein
Industry leaders explore cost-effective defensive architectures and incident response playbooks tailored for small organizations facing modern ransomware threats.
Briefings·26 min
Jiashuo Liang · Guancheng Li
Introduces a novel gradient-based prompt-injection technique that can generate universal triggers to manipulate open-source Large Language Model (LLM) outputs.
Briefings·40 min
Rebecca Lynch · Rich Harang
The flexibility and power of large language models (LLMs) are now well understood, driving their integration into a wide array of real-world applications.