EU cyber law won’t force fixes for fridge controllers hit in French attack

The EU's Cyber Resilience Act requires companies to address vulnerabilities and provide free updates, but only during a product's defined support period. This means that manufacturers are not obligated to fix vulnerabilities outside of this timeframe, as determined by the manufacturers themselves.