EU plans cybersecurity overhaul to block foreign high-risk suppliers

The European Commission announced a cybersecurity package that would mandate the removal of high-risk vendors from EU telecommunications networks, enable EU-wide risk assessments across 18 critical sectors, and revise the Cybersecurity Act to streamline certification via ENISA, centralize incident reporting with early threat alerts, support ransomware response alongside Europol and CSIRTs, and establish EU-wide skills attestations and a Cybersecurity Skills Academy; once approved by Parliament and Council, the act would take immediate effect, with member states given one year to implement national amendments.