U.S. public companies now have a tight 4-day window to disclose cybersecurity incidents deemed "material" by SEC rules. This includes investigating breaches involving third-party vendors. The regulation marks a significant shift, possibly impacting international stock market listings.