Following the communiqué published on 19 March 2026, the CSSF would like to inform the supervised entities concerned that the eDesk module for cross-border management notifications and de-notifications with a European passport is now available for Luxembourg-domiciled IFMs. As a reminder, the supervised entities concerned…

regarding the “LMT activation” module in relation to additional liquidity management requirements for Luxembourg-domiciled UCITS, or where applicable their management company, and Luxembourg-authorised AIFMs that manage open-ended AIFs, introduced by the Law of 3 March 2026, transposing Directive (EU) 2024/927 of the European Parliament and of…

The CSSF has been made aware of a critical supply chain attack targeting two versions of the widely used Axios HTTP client library package. Threat actors compromised maintainer accounts to inject a dependency, plain-crypto-js (specifically version 4.2.1). As Axios is central to many architectures, a…

On the basis of the CSSF’s annual risk assessment to identify the main risks associated with the activities of investment funds and investment fund managers (“IFMs”) and giving due consideration to the broader economic and geopolitical context, the CSSF defined a number of key supervisory…