The CRA Fringe
Our weekly newsletter. Each issue introduces a new CRA dossier: a single question, worked through the primary sources, to a defended answer.
The CRA Fringe issues
Extended Security Maintenance and “Placing on the Market”
Issue 5 of The CRA Fringe: whether continuing to maintain a product places it on the market again under the Cyber Resilience Act, and what a paid extended security maintenance offering may charge for.
Iterative Software and Support Periods Under the Cyber Resilience Act
Issue 4 of The CRA Fringe: how the Cyber Resilience Act decides which releases of iteratively developed software continue an existing support obligation and which start a new one.
Who Becomes the Manufacturer When You Patch
Issue 3 of The CRA Fringe: when a downstream change to a product becomes a substantial modification under Article 22 of the CRA, and who holds the manufacturer obligations for it.
When Support Ends and Article 14 Keeps Running
Issue 2 of The CRA Fringe: why a manufacturer's Article 14 reporting duty outlasts a product's support period, and where it actually ends.
Vulnerability Handling and the Clocks That Started Today
Issue 1 of The CRA Fringe: the 11 September 2026 Article 14 reporting obligations, the two triggers, and the 24 / 72 / 14 clocks.
Get every issue on LinkedIn
A new dossier with every issue. Subscribe on LinkedIn to receive The CRA Fringe as it is published.
Subscribe on LinkedIn