The Financial Sector Supervisory Commission (CSSF) has issued a directive making cybersecurity a core governance issue for all members of the management body in Luxembourg's financial sector. The regulator emphasizes that the proliferation of AI-driven cyberattacks has fundamentally altered the risk landscape, with vulnerabilities now being exploited almost instantly upon discovery. This leaves organizations with no time for the traditional process of assessing, testing, and deploying patches before a large-scale attack occurs.