Skip to content Skip to sidebar Skip to footer

Connected Products Under Attack: The CRA and NIS2 Duties Exposed by the French Refrigeration Case

A cyber attack that disabled refrigeration in roughly 700 French supermarkets has turned the European reporting duties on connected products from a paper exercise into a live test, and it exposes three separate layers of liability that sit with three different parties: the manufacturer of the device, the operator of the site, and the maintenance contractor in between.

The Cyber Resilience Act for gambling operators and suppliers: what falls in scope and what has to be done

The Cyber Resilience Act reaches the gambling sector more widely than most operators assume. Downloadable casino and sportsbook clients, mobile applications, gaming cabinets, self-service betting terminals, kiosks and the software supplied with them all qualify as products with digital elements, and the guidance approved by the European Commission on 27 July 2026 removes much of the uncertainty as to where the perimeter runs.