Search Results for “Cybersecurity”

Communiqué

Published on 05.07.2024

Public Consultation and Feedback Period for Implementing Regulation laying down rules for the application of Directive (EU) 2022/2555 (NIS2 Directive) as regards technical and methodological requirements of cybersecurity risk management measures and further specification of the cases in which an incident is considered to be significant

Page

Communiqué

Published on 28.02.2025

DORA – Postponement of notification to financial entities of their obligation to report a major incident on weekends or bank holidays

Page

RTS

Published on 13.02.2025

Commission Delegated Regulation (EU) 2025/295 of 24 October 2024

supplementing Regulation (EU) 2022/2554 of the European Parliament and of the Council with regard to regulatory technical standards on harmonisation of conditions enabling the conduct of the oversight activities

Lien

Link

RTS

Published on 13.02.2025

Commission Delegated Regulation

complétant le règlement (UE) 2022/2554 du Parlement européen et du Conseil par des normes techniques de réglementation précisant les critères utilisés pour identifier les entités financières tenues d’effectuer des tests d’intrusion fondés sur la menace, les exigences et les normes régissant le recours à des testeurs internes, les exigences relatives au périmètre et à la méthodologie des tests ainsi qu’à l’approche à suivre pour chaque phase des stades de test, de résultats, de clôture et de correction et le type de coopération en matière de surveillance et les autres types de coopération pertinents qui sont nécessaires pour l’exécution des tests d’intrusion fondés sur la menace et pour la facilitation de la reconnaissance mutuelle

Lien

Link

ITS

Published on 20.02.2025

Commission Implementing Regulation (EU) 2025/302 of 23 October 2024

laying down implementing technical standards for the application of Regulation (EU) 2022/2554 of the European Parliament and of the Council with regard to the standard forms, templates, and procedures for financial entities to report a major ICT-related incident and to notify a significant cyber threat

Lien

Link

RTS

Published on 20.02.2025

Commission Delegated Regulation (EU) 2025/301 of 23 October 2024

supplementing Regulation (EU) 2022/2554 of the European Parliament and of the Council with regard to regulatory technical standards specifying the content and time limits for the initial notification of, and intermediate and final report on, major ICT-related incidents, and the content of the voluntary notification for significant cyber threats

Lien

Link

Communiqué

Published on 03.03.2025

Financial transaction fraud after system compromise via Remote Management and Monitoring (RMM) tools

Page

Communiqué

Published on 02.02.2024

Ivanti active vulnerabilities exploited in Luxembourg

Page

Communiqué

Published on 24.02.2023

Unpatched Microsoft Exchange vulnerabilities

533 servers in Luxembourg need immediate attention

Page

Communiqué

Published on 15.01.2025

Entry into application of DORA regulation on 17 January 2025

Page

ITS

Published on 02.12.2024

Commission Implementing Regulation (EU) 2024/2956 of 29 November 2024

laying down implementing technical standards for the application of Regulation (EU) 2022/2554 of the European Parliament and of the Council with regard to standard templates for the register of information

Lien

Link

Communiqué

Published on 07.10.2024

Results of the DORA readiness survey conducted in September 2024

Page

Studies and reports

Published on 07.10.2024

Results of the DORA readiness survey

PDF (908.88Kb)

Studies and reports

Published on 17.07.2024

Published on 11.07.2024

Luxembourg “DORA Law” published in the Official Journal

Page

Communiqué

Published on 31.05.2024

Critical vulnerability in Check Point VPN (CVE-2024-24919)

Page

Communiqué

Published on 26.04.2024

Critical vulnerabilities in Cisco ASA software/appliance and FTD software (CVE-2024-20359, CVE-2024-20358, CVE-2024-20353)

Page

Name	Description	Duration
cssf_cookies	Saves information regarding the user's consent to the use of cookies for each optional category.	1 year
ROUTEID	Technical cookie allowing load distribution.	Deleted when the browsing session ends
TBMCookie*	Security: This cookies protects the website against automated attacks.	Deleted when the browsing session ends
__utmvc	These first party cookies are set by a third party service to filter out malicious requests.	Deleted when the browsing session ends
__utmvm*	These first party cookies are set by a third party service to filter out malicious requests.	15 minutes

Name	Description	Duration
cssf_profile	This cookie adapts the website pages to the profile chosen by the visitor (professionals, markets, consumers).	1 year
pll_language	This cookie saves the user’s language choice.	1 year

Name	Description	Duration
_pk_id.#	Collects anonymous statistical data on the website consultations, such as the number of visits or the average time spent on the website. The data is processed in-house and is not shared with a third party.	1 year
_pk_ses.#	Collects anonymous statistical data for the tracking of the pages consulted during the browsing session. The data is processed in-house and is not shared with a third party.	30 minutes

Search Results for Cybersecurity

Advanced filters

79 Result(s)

DORA – Postponement of notification to financial entities of their obligation to report a major incident on weekends or bank holidays

Commission Delegated Regulation (EU) 2025/295 of 24 October 2024

Commission Delegated Regulation

Commission Implementing Regulation (EU) 2025/302 of 23 October 2024

Commission Delegated Regulation (EU) 2025/301 of 23 October 2024

Financial transaction fraud after system compromise via Remote Management and Monitoring (RMM) tools

Ivanti active vulnerabilities exploited in Luxembourg

Unpatched Microsoft Exchange vulnerabilities

Entry into application of DORA regulation on 17 January 2025

Commission Implementing Regulation (EU) 2024/2956 of 29 November 2024

Results of the DORA readiness survey conducted in September 2024

Results of the DORA readiness survey

Joint Regulatory Technical Standards on the criteria for determining the composition of the joint examination team

Joint Guidelines on the estimation of aggregated costs and losses caused by major ICT-related incidents

Joint Guidelines on oversight cooperation

CrowdStrike Agent causing BSOD loop on Windows

Luxembourg “DORA Law” published in the Official Journal

Critical vulnerability in Check Point VPN (CVE-2024-24919)

Critical vulnerabilities in Cisco ASA software/appliance and FTD software (CVE-2024-20359, CVE-2024-20358, CVE-2024-20353)