EFF: EU’s Proposed Cyber Resilience Act Raises Concerns for Open Source and Cybersecurity

… We join our partner organization EDRi in calling for a safe harbor for researchers involved in coordinated disclosure practices. This safe harbor should not imply that other forms of disclosure are harmful or malicious. An EU-wide blanket safe harbor will give assurance to security researchers that they will not come under legal threat by doing the right thing.