News · issue 001 · Tue 20 Oct 2026

This week's signal.

The twice-weekly ProductBrew digest for software product teams: ten items, five minutes, every source checked.

01

📱 News & Trends

📱 News & Trends
6 min read · ✓ checked

The EU Cyber Resilience Act turns updatability into a legal requirement

The CRA covers hardware and software products with digital elements sold in the EU. Full obligations apply from December 2027, but the first reporting requirements began in September 2026. Products must meet 13 requirements, including secure defaults, being updatable when a flaw is found, and letting customers delete or move their data.

02

🚀 Opinions & Tutorials

03

👨‍💻 Resources & Tools

04

🎁 Miscellaneous

Quick links

⚡️ Two more reads.

Brew note

Three of this issue's pieces say the same thing from different chairs: the product is moving out of its own building, into the customer's office, the user's agent and the regulator's checklist. Design for being visited less and trusted more. — ProductBrew