EU Commission Proposes Major Cybersecurity Package to Counter Supply Chain and Foreign Threats (mayerbrown.com)

• Commission proposes revised Cybersecurity Act and NIS2 amendments
• Mandatory 24-hour incident reporting for essential entities
• European Cyber Shield to enable real-time threat intelligence sharing

"The European Commission has proposed a comprehensive cybersecurity package in January 2026, including revisions to the Cybersecurity Act and NIS2 Directive. The package targets supply chain vulnerabilities, mandates enhanced security requirements for critical infrastructure operators, and establishes mechanisms to counter foreign interference. It introduces mandatory cyber incident reporting within 24 hours for essential entities and creates a European Cyber Shield for threat intelligence sharing."