Company intelligence
Cyber Solutions Luxembourg
Risk-driven cybersecurity, DevSecOps, AI governance and process automation for Luxembourg and EU organisations
About Cyber Solutions Luxembourg
Cyber Solutions Luxembourg helps Luxembourg and EU organisations improve cybersecurity, secure delivery, ICT risk evidence and controlled AI adoption through senior hands-on consulting and implementation. Founder-led by Iulian Datcu, Cyber Solutions provides focused cybersecurity and technology services for regulated organisations, technology providers and SMEs. Cybersecurity, ICT risk and resilience Threat detection, vulnerability management, vulnerability assessment and penetration testing, security operations, infrastructure security, DORA, NIS2, MiCA and operational resilience. DevSecOps and secure delivery Secure software delivery, CI/CD, source and infrastructure security, cloud and platform engineering, Kubernetes/OpenShift, Linux/RHEL, automation and repeatable control implementation. AI governance and secure AI adoption AI risk management, EU AI Act considerations, LLM guardrails, human oversight, traceability, controlled AI adoption and AI-enabled process automation, applied across cybersecurity, reporting and operations while preserving accountability and audit evidence. Process automation and operating models Process optimisation, workflow automation, KPI/KRI models, management reporting, project leadership, IT architecture and practical digitalisation programmes. The delivery model combines assessment, architecture, implementation and operational enablement: practical controls, automated repetitive work and evidence teams can operate sustainably. We support focused consulting engagements, implementation mandates, audit and remediation work, technical leadership and cost-effective digitalisation for organisations that need senior capability without a large permanent team. Based in Luxembourg and working across Luxembourg and the EU. Discuss a focused Security, Automation and AI Risk Baseline: https://www.iuliandatcu.com/ Company website: https://www.cybersolutions.lu
Verified activity
Signals from Cyber Solutions Luxembourg
25 published signals
Legal & Regulatory
Cyber Solutions Luxembourg announced that the AMLA deadline for the voluntary survey on Central Contact Points is 15 September.
Reported by Cyber Solutions Luxembourg
Products & Services
Cyber Solutions Luxembourg confirmed that every GitLab instance is on a fixed version by exact version string.
Reported by Iulian Datcu
Legal & Regulatory
Cyber Solutions Luxembourg noted that two laws were signed in Luxembourg on 5 May 2026, with CRD VI changing how deals are done.
Reported by Cyber Solutions Luxembourg
Legal & Regulatory
Cyber Solutions Luxembourg noted that thresholds matter for scoping, and materiality is defined in percentage terms.
Reported by Cyber Solutions Luxembourg
Legal & Regulatory
Cyber Solutions Luxembourg noted that there is no annual deadline to diarise, and three categories of operation now require written notification to the CSSF before implementation.
Reported by Cyber Solutions Luxembourg
Legal & Regulatory
Cyber Solutions Luxembourg noted that the operational shift is transaction-triggered, not calendar-triggered.
Reported by Cyber Solutions Luxembourg
Legal & Regulatory
Cyber Solutions Luxembourg noted that the Luxembourg branch strategy for a non-EU group is now a dated decision, not an open one.
Reported by Cyber Solutions Luxembourg
Legal & Regulatory
Cyber Solutions Luxembourg noted that the CRD VI third-country branch regime applies from 11 January 2027, and a late-August CSSF circular has extended DORA to those same branches.
Reported by Cyber Solutions Luxembourg
Legal & Regulatory
Cyber Solutions Luxembourg noted that the 5 May 2026 law transposing CRD VI amended the 1993 financial-sector law and took effect on 10 May.
Reported by Cyber Solutions Luxembourg
Legal & Regulatory
Cyber Solutions Luxembourg noted that on 3 August the CSSF launched a dedicated page explaining a new prior-notification regime for material operations by credit institutions and financial holding companies.
Reported by Cyber Solutions Luxembourg
Legal & Regulatory
Cyber Solutions Luxembourg's EDPB adopted the final version of Guidelines 02/2025 on processing personal data through blockchain, published on 8 July 2025, which steps back from the draft to avoid putting personal data on a public chain and prefers permissioned architectures.
Reported by Cyber Solutions Luxembourg
Legal & Regulatory
Cyber Solutions Luxembourg notes that the ECSO tracker shows that 23 out of 27 member states had transposed by mid-May, with the Dutch law now in force effectively making Ireland, Spain, and France without a national law.
Reported by Cyber Solutions Luxembourg
Legal & Regulatory
Cyber Solutions Luxembourg notes that on 8 July the Commission asked the Court of Justice to fine four member states that still have no NIS2 law.
Reported by Cyber Solutions Luxembourg
Legal & Regulatory
Cyber Solutions Luxembourg notes that the Netherlands passed its Cyberbeveiligingswet on 7 July, entered into force on 15 August, and the referral proceeded because it is based on formal notification rather than parliamentary progress.
Reported by Cyber Solutions Luxembourg
Legal & Regulatory
Cyber Solutions Luxembourg announced that the Cyber Resilience Act reporting obligations begin to apply to manufacturers of products with digital elements on 11 September.
Reported by Cyber Solutions Luxembourg
Products & Services
Cyber Solutions Luxembourg highlights GitHub Actions OIDC tokens that can carry immutable identifiers in the sub claim, which breaks trust policies matching on names.
Reported by Iulian Datcu
Legal & Regulatory
Cyber Solutions Luxembourg confirmed that 3 September marks the go-live date for the updated weekly position reporting regime under ESMA MiFID II.
Reported by Cyber Solutions Luxembourg
Products & Services
Cyber Solutions Luxembourg is inventorying every Mac with Screen Sharing or Remote Management enabled to confirm the August 6 build is installed and to ask why any of them answers on 5900 from the internet.
Reported by Iulian Datcu
Legal & Regulatory
Cyber Solutions Luxembourg notes that the MiCA review consultation window closes on 30 September 2026.
Reported by Cyber Solutions Luxembourg
Legal & Regulatory
Cyber Solutions Luxembourg notes that the Cyber Resilience Act incident and vulnerability reporting obligations begin to apply to manufacturers of products with digital elements on 11 September 2026.
Reported by Cyber Solutions Luxembourg
Legal & Regulatory
Cyber Solutions Luxembourg noted that Regulation (EU) 2026/1744 entered into force on 27 July.
Reported by Cyber Solutions Luxembourg
Products & Services
Cyber Solutions Luxembourg upgraded Vault to close the privilege-escalation advisory for the HCSEC-2026-32 CVE-2026-5006 slash injection vulnerability, with the fix ships turned off.
Reported by Iulian Datcu
Legal & Regulatory
Cyber Solutions Luxembourg noted that the original deadline for the ILR consultations on Luxembourg NIS2 regulations was 6 August, and the ILR extended both references to 31 August on 3 August.
Reported by Cyber Solutions Luxembourg
Legal & Regulatory
Cyber Solutions Luxembourg highlighted that on 7 July the ILR opened two public consultations on the draft regulations implementing the Luxembourg NIS2 law, one on security measures and one on incident notification.
Reported by Cyber Solutions Luxembourg