Skip to content
TrustList

TrustList daily digest

Thursday, 1 October 2026

Everything TrustList published on this day, 30 stories, grouped by subject and each in a line of our own.

News22

This group on its own

  1. 1News

    Exchange Web Services starts switching off in Exchange Online in October 2026, fully off by April 2027

    Microsoft begins disabling Exchange Web Services (EWS) in Exchange Online for all organisations in October 2026 and switches it off fully in April 2027. Apps that still use EWS, including Apple Mail and Calendar on macOS, need a migration plan now.

  2. 2News

    China opens the 2026 list for the chip-industry VAT additional deduction: firms apply from 9 to 16 October 2026

    MIIT, NDRC, the Ministry of Finance and the State Taxation Administration: integrated-circuit firms apply 9 to 16 October 2026 for the 2026 VAT additional-deduction list. Firms on the 2025 list but not the 2026 one lose the benefit on 30 November.

  3. 3Business news

    IT services takeovers completed on 30 September and 1 October 2026: Capgemini Government Solutions, OPTiM, GMO NIKKO, Empire State

    Capgemini sold its US government unit to ITC Federal; Valtes bought OPTiM; GMO Commerce took over GMO NIKKO and GMO Insight; Usonar bought 70% of Empire State; Asia Quest agreed to buy Tetra Communications. What changes for customers.

  4. 4News

    GitHub Enterprise Cloud with data residency refuses X25519-only TLS clients from 7 October 2026

    From 7 October 2026, GHE.com (GitHub Enterprise Cloud with data residency) stops accepting HTTPS clients that offer only X25519 for key agreement. Make sure P-256 is enabled in proxies, appliances and TLS libraries. SSH is not affected.

  5. 5News

    India puts a 0.4% merchant fee on UPI payments above ₹2,000 from 15 October

    UPI merchant payments above ₹2,000 carry a 0.4% merchant discount rate from 15 October 2026, capped at ₹300, with a flat ₹5 in some sectors and 0.02% for capital markets. Small merchants and payments up to ₹2,000 stay free.

  6. 6Business news

    Layoffs at software vendors, week to 1 October 2026: Workday, Microsoft and Blaize, and what customers should check

    Workday is cutting about 2.5% of its workforce, mainly in product and technology (8-K, 29 September); Microsoft filed a WARN notice for 277 jobs in Redmond; Blaize is cutting about 26%. What each says, and what customers should ask.

  7. 7Business news

    Pulley, the cap-table software, shuts down on 8 December 2026: export your data before 31 January 2027

    Pulley says its cap-table app shuts down on 8 December 2026, with limited data access until 31 January 2027. Customers who want its Carta migration offer must opt in by 30 November 2026. What to do now.

  8. 8Business news

    IT services filings on 1 October 2026: Wipro completes the Alpha Net contracts deal, Loihde completes BLC Turva and withdraws guidance, Avensia cuts staff

    Wipro has taken over selected customer contracts of Alpha Net Consulting; Finland’s Loihde has completed its EUR 28 million purchase of BLC Turva and withdrawn its 2026 guidance; Sweden’s Avensia is cutting staff to save SEK 13 million a year.

  9. 9Business news

    Layoffs follow-up, 1 October 2026: F-Secure plans up to 145 role cuts in a new operating model; Oracle filed a WARN notice for 359 Seattle jobs

    F-Secure plans to cut up to 145 roles (58 in Finland, 87 elsewhere) as it reorganises into three business units from 1 January 2027; talks start 6 October. Washington State lists an Oracle notice for 359 permanent layoffs in Seattle from 13 November.

  10. 10HR News

    California signs AI-at-work laws: no firing or discipline by AI alone, disclosure when AI causes mass layoffs, limits on workplace surveillance

    Governor Newsom signed SB 947, SB 951, AB 1331 and AB 1883 on 30 September 2026: employers may not rely only on AI to discipline or fire, must disclose when AI causes a mass layoff, and face new limits on workplace surveillance.

  11. 11Business news

    Software takeovers on 30 September and 1 October 2026: Opus 2 buys Bundledocs, Xopero buys Vigil Guard

    Legal-technology firm Opus 2 has acquired Bundledocs, the document-bundling software; backup vendor Xopero Software has acquired Vigil Guard, an AI-security platform. Neither states a price. What changes for customers.

  12. 12Business news

    Connectivity and IoT takeovers on 1 October 2026: Inseego completes its purchase of Nokia’s fixed wireless business, VEGA acquires akenza

    Inseego completed its purchase of Nokia’s fixed wireless access business on 1 October 2026, and German sensor maker VEGA has acquired the Zurich IoT platform akenza, which says nothing changes for its customers. What to check.

  13. 13News

    Microsoft 365 Copilot adds two third-party AI models from 30 September 2026: each needs a subprocessor switched on, and usage limits apply

    From 30 September 2026 Microsoft 365 Copilot rolls out new models from OpenAI and Anthropic in Cowork and Copilot Studio, then Word, Excel, PowerPoint and Chat. Each requires that lab’s subprocessor to be enabled; usage limits apply (MC1483844).

  14. 14News

    Twilio limits US message throughput from 19 November 2026 to 4 January 2027: plan peak-season SMS now

    Twilio’s Heightened Awareness Period runs from 19 November 2026 to 4 January 2027: US sending rates for toll-free, short code and 10DLC may be limited per account, and high-volume short code and toll-free senders may move to Market Throughput.

  15. 15News

    France: applications for the seventh ETIncelles cohort for growth SMEs close on 9 October 2026

    France’s Directorate General for Enterprise takes applications until 9 October 2026 for the seventh cohort of ETIncelles, 18 months of support for growth SMEs with 60 to 220 staff that want to become mid-sized firms. About 50 firms are chosen each year.

  16. 16News

    Australia: from 10 December 2026, privacy policies must disclose automated decisions that use personal information

    From 10 December 2026, organisations covered by Australia’s Privacy Act must say in their privacy policy when a computer program makes or substantially informs decisions that significantly affect people. The OAIC published guidance on 30 September.

  17. 17News

    Innovate UK Funding Service offline from 4pm Friday 2 October to 10am Monday 5 October 2026: save and submit first

    Innovate UK’s Innovation Funding Service is down for maintenance from 4pm on 2 October to 10am on 5 October 2026. Applicants should save or submit before then. Frontier AI: SME Champions Phase 1 opened on 1 October and closes on 11 November.

  18. 18News

    Microsoft enforces Dataverse storage limits for Dynamics 365 from 9 November 2026: over-capacity sandboxes can be disabled

    From 9 November to 4 December 2026 Microsoft rolls out storage validation for Dataverse-only Dynamics 365 tenants: over capacity, environment create, copy and restore stop; sandboxes without pay-as-you-go go admin-only at 30 days, disabled at 60.

  19. 19News

    EU consultation on copyright and AI is open until 3 November 2026

    The European Commission asks whether EU copyright law needs new measures on the use of protected content in AI, piracy of live events, music performers’ remuneration and research. Generative-AI providers are invited. Closes 3 November 2026.

  20. 20News

    Exchange Online PowerShell: upgrade the ExchangeOnlineManagement module to 3.10.1 before strict logon enforcement on 31 March 2027

    Microsoft says ExchangeOnlineManagement versions before 3.10.1 may fail interactive sign-in once strict logon enforcement begins on 31 March 2027 (rollout to late April), especially PowerShell 7 with WAM disabled. Upgrade and test scripts first.

  21. 21News

    Windows 11 26H2 turns Windows settings backup on by default: review the policy if you have left it “Not Configured”

    From 29 September 2026, with Windows 11 26H2, Windows settings backup is on by default on eligible devices where the policy is “Not Configured”. Explicit settings are honoured. Admins who do not want it must disable it explicitly (MC1483538).

  22. 22HR News

    UK: small employers get £2,000 for every new young apprentice, paid through the training provider

    Non-levy-paying employers get £2,000 for each new apprentice aged 16 to 24, in two £1,000 instalments at 90 days and one year (242 days for foundation apprenticeships). No application: the training provider passes it on within 30 working days.

Tech and security6

This group on its own

  1. 1Security advisories

    Zammad helpdesk zero-days exploited since 21 September: update to Zammad 7.2.0 or take instances offline

    Two Zammad flaws, CVE-2026-102489 and CVE-2026-102490, are exploited. Zammad says 7.0 and later are not affected by the first and the second needs prior server access; it advises updating to 7.2.0. A fix for the second is pending.

  2. 2Security advisories

    FreePBX publishes four security advisories on 29 September 2026: update the Pinsets, Sangoma Connect, SIPSTATION and Contact Manager modules

    FreePBX’s 29 September advisories fix three high-severity SQL injection flaws (Pinsets, Sangoma Connect RT API, SIPSTATION) and a contact-manager access flaw, after six high or medium advisories on 17 September. All need a login; update the modules.

  3. 3Security advisories

    Kiteworks fixes more than 100 flaws, 12 of them critical, in Core and its Email Protection Gateway: update to 9.5.1

    Kiteworks published more than 100 security advisories on 30 September 2026, 12 rated critical, for Core, the Email Protection Gateway, Secure Data Forms and MFT Server. The most severe, a gateway code-injection flaw, is fixed in 9.4.1; update to 9.5.1.

  4. 4Security advisories

    Zimbra flaw CVE-2026-73570 is being exploited: update to 10.1.20 and check for intrusions

    The Zimbra SNMP command-injection flaw CVE-2026-73570, fixed in 10.1.20 on 20 July 2026, has been on CISA’s exploited list since 21 August. Microsoft saw probing from 28 July. Servers with zimbra-snmp enabled need 10.1.20 and an intrusion check.

  5. 5Security advisories

    MikroTik RouterOS critical flaw CVE-2026-84411 allows unauthenticated root code execution: update to 7.24

    Italy’s national cyber agency warns of a critical flaw in MikroTik RouterOS before 7.24 that lets an unauthenticated remote attacker run code as root or knock the device offline. No exploitation reported. Update routers and switches to 7.24.

  6. 6Security advisories

    JetBrains fixes 12 high-severity flaws in YouTrack, Hub, IntelliJ IDEA and TeamCity: update self-hosted servers

    Italy’s national cyber agency reports JetBrains updates fixing many flaws, 12 rated high, in YouTrack (before 2026.2.19422), Hub, IntelliJ IDEA (before 2026.2.3) and TeamCity (before 2026.1.4 or 2025.11.8). No exploitation reported.

Sectors2

This group on its own

  1. 1Robotics & Automation

    euRobotics asks Brussels to challenge the US ban on foreign-made robots

    An open letter calls the FCC restriction "geographic discrimination" and asks the Commission to raise it in EU-US trade and technology dialogues. It was coordinated by board member Carlos Vivas.

  2. 2Robotics & Automation

    Teradyne Robotics sues a JAKA unit over patents and settles with Elite

    The Copenhagen case could produce a ruling covering 17 of the 18 Unified Patent Court states. The Elite Robots dispute ended by confidential agreement with no admission of liability.

TrustList Weekly

The week in software and IT, in one email

The news that matters to buyers, new rankings and our own research. Every Thursday, free, and easy to leave.

We will email you to confirm. Unsubscribe with one click in any issue. Privacy policy