Critical vulnerability on Palo Alto Networks PAN-OS (CVE-2024-3400)

The CSSF has been made aware of a recent critical vulnerability: a command injection vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software, referred to as CVE-2024-3400. This vulnerability can allow an unauthenticated attacker to execute arbitrary code with root privileges on the…

Administrative sanction of 14 December 2023

Administrative sanction imposed on a réviseur d’entreprises agréé (approved statutory auditor)

Administrative sanction of 19 February 2024

Administrative sanction imposed on TALABOT INVESTMENTS LLP

Direct transmission of procedures to the CSSF

In 2023, the CSSF officially introduced new means of communication with professionals in the financial sector: eDesk, Api (S3), etc. In order to ease the completion and submission of your procedures, you can perform them either : via our eDesk Portal: a form allows you…

Administrative penalty of 22 February 2024

Administrative penalty imposed on the payment institution Sogexia S.A.

Warning issued by the French authority (AMF) regarding fraudulent press advertisements proposing investments in car parks with electric charging points

The CSSF would like to relay the warning of the Autorité des marchés financiers (AMF) concerning fraudulent press advertisements proposing investments in car parks with electric charging points, as individuals in Luxembourg are also affected.

Suspension of payments of OPPORTUNITE LUXEMBOURG S.A. – Activation of the Luxembourg Investor Compensation Scheme (SIIL)

Press release 24/11
On 28 March 2024, the Luxembourg Tribunal d’arrondissement de et à Luxembourg (Luxembourg District Court) dealing with commercial matters, decided by a judgment to admit OPPORTUNITE LUXEMBOURG S.A. to the benefit of the payment suspension procedure, following a request of the CSSF…

CSSF Regulation No 24-03 of 28 March 2024 (only in French)

on the setting of the countercyclical buffer rate for the second quarter of 2024

Circular CSSF 24/856 (only in French)

on the Investor protection in case of a NAV calculation error, a non-compliance with investment rules and other errors at the level of a UCI

The CSSF publishes the reform of Circular CSSF 02/77 on NAV calculation errors and investment breaches

Considering the CSSF’s important mandate of investor protection and in view of the regulatory developments since 2002, the developments of the supervisory practices of the CSSF and the market evolution with regard to the activities of undertakings for collective investment (UCI), the Commission de Surveillance…

Suspension of payments: OPPORTUNITE LUXEMBOURG S.A. – Appointment of an administrator

Press release 24/10
In accordance with Article 122 of the Law of 18 December 2015 on the failure of credit institutions and certain investment firms, the Tribunal d’arrondissement de et à Luxembourg (Luxembourg District Court) dealing with commercial matters, decided, by a judgment of 28…

Global situation of undertakings for collective investment at the end of February 2024

Press release 24/09
As at 29 February 2024, the total net assets of undertakings for collective investment, comprising UCIs subject to the 2010 Law, specialised investment funds and SICARs, amounted to EUR 5,393.311 billion compared to EUR 5,326.332 billion as at 31 January 2024, i.e.…

Circular CSSF-CPDI 24/40

Survey on the amount of covered deposits held on 31 March 2024

Communiqué regarding new reporting procedure for ICT-related incident reporting according to Circular CSSF 24/847

As indicated in our communiqué published on 5 January 2024 related to ICT-related incident reporting, we publish today further guidance related to the submission channels and procedure to be followed when submitting an ICT-related incident notification under Circular CSSF 24/847. We remind Supervised Entities that…

EMIR REFIT reporting goes live on 29 April 2024

The CSSF reminds all counterparties involved in derivatives transactions of the upcoming entry into force of the new EMIR REFIT reporting on 29 April 2024. In this context, the CSSF wants to draw the attention of counterparties to the following elements, with a particular emphasis on…

Digital Operational Resilience Act (DORA)

The CSSF launched today a new web page dedicated to the Digital Operational Resilience Act (DORA) which will be applicable to no less than 20 types of financial entities as from 17 January 2025. The objective of the web page is to provide financial entities…

The CSSF’s supervisory priorities in the area of sustainable finance

Update March 2024
The objective of this present document is to give a general overview of the CSSF’s supervisory priorities in the area of sustainable finance. As the supervisory authority of the financial sector, the CSSF strives to accompany the transition of the financial sector…

Second stage of the ESMA Common Supervisory Action (CSA) on sustainability risks and disclosures in the investment fund sector

On 6 July 2023 the European Securities and Markets Authority (ESMA) announced the launch of a Common Supervisory Action (CSA) with National Competent Authorities (NCAs) across the European Union on the integration of sustainability risks and disclosures. The aim of the CSA is to investigate…

Administrative penalty of 19 February 2024

Administrative penalty imposed on the professional of the financial sector POST Luxembourg

Circular CSSF 24/855

Application of the Guidelines of the European Securities and Markets Authority on transfer of data between Trade Repositories under EMIR and SFTR

Administrative sanction of 23 February 2023

Administrative sanction imposed on Intertrust (Luxembourg) S.à r.l.

Profit and loss account of credit institutions as at 31 December 2023

Press release 24/08
Profit before provisions of the Luxembourg banking sector1 amounted to EUR 8,942 million in 2023, representing an increase of 45.1% compared to the previous year. Taking into account the provisions for risks, which reverted to the mean following an exceptional year 2022,…

Commission des normes comptables (CNC) publishes two Q&As (only in French)

La CSSF souhaite attirer l’attention sur la publication par la Commission des normes comptables de deux « Questions / Réponses » qui sont accessibles en ligne dès à présent sur son site Internet sous la section « Actualités » ( et sous la section « Publications », sous-section « Doctrine » ( dont…


The CSSF invites you to read the communiqué of the Luxembourg Prosecutor’s Office regarding the so-called « Crypto4Winners » case.

Communiqué in relation to the "Bureau de gestion des avoirs"

With regard to the Bureau de gestion des avoirs, “BGA”, the CSSF would like to draw the attention to the obligations that derive from the Law of 22 June 2022 on the management and recovery of seized or confiscated assets (hereinafter, “the Law”) which came…