ENISA’s updated CRA Single Reporting Platform FAQs explain how manufacturers, including gambling operators and supplier, shall report actively exploited vulnerabilities and severe incidents from 11 September 2026, and what companies, including those operating in the gambling sector, need to put in place now to respond within the first 24 hours.