TrustList daily digest

Saturday, 3 October 2026

Everything TrustList published on this day, 14 stories, grouped by subject and each in a line of our own.

News8

This group on its own

1News
New York City click-to-cancel rule in force from 1 October 2026: subscriptions must be cancellable the way they were bought, penalties from $525
The city's consumer-protection department now enforces a rule requiring clear subscription terms and a cancellation route matching the sign-up route; civil penalties start at $525 and refunds may be ordered.
2News
Mexico: Congress committee approves customs valuation reform for 1 January 2027 and a digital payments law, floor vote expected next week
The Finance Committee cleared a Customs Law reform (valuation checks, a 20% seizure line) and a digital payments law on 1 October; a floor vote is expected next week. Importers: customs rules are due by 31 December.
3News
China opens 2026 applications for the chip-industry VAT super-deduction list, 9 to 16 October
Four Chinese ministries opened the 2026 list for the chip-sector VAT super-deduction: file online between 9 and 16 October; results visible after 30 November, and firms dropped from the 2025 list lose relief that day.
4News
Kenya orders mobile operators to deliver government emergency SMS despite DND and opt-outs
Kenya's Communications Authority wrote to four operators on 1 October requiring government emergency SMS to reach every active subscriber, with first tests on 2 October; bulk-SMS senders should check traffic priority and opt-out handling.
5News
GitHub App installation tokens are now stateless and about 520 characters long: test the opt-in header out by 30 November 2026
GitHub finished rolling out stateless installation tokens on 2 October: still ghs_ but about 520 characters instead of 40. The temporary opt-in header stops working on 30 November 2026, so check length limits, secret stores and proxies.
6Business news
Claro completes purchase of 72.83% of Brazilian broadband provider Desktop for R$1.75 billion; tender offer and B3 exit to follow
Claro NXT closed its purchase of control of Desktop on 1 October 2026 at R$20.63 a share; a tender offer, conversion to category B and exit from the Novo Mercado are planned, and the price may still be adjusted.
7News
AWS Security Hub Threat Analytics now bills GuardDuty Runtime Monitoring itself: no separate GuardDuty charge where Security Hub is enabled
From 2 October 2026 AWS includes GuardDuty Runtime Monitoring in the Security Hub Threat Analytics plan: where Security Hub is on, the usage moves to the Security Hub line as one usage type. Check your bill and any cost allocation rules.
8News
AWS Brazil starts automated resale of foreign SaaS licences to Brazilian buyers: invoices in reais with local taxes, paid by card or invoice
From 2 October 2026 the AWS Brazil 2P Distribution Program lets eligible non-Brazilian SaaS vendors have AWS Brazil resell their licences: AWS Brazil is seller of record, invoices in BRL with Brazilian taxes and withholds tax.

Tech and security1

This group on its own

1Security advisories
Exchange Server September 2026 V2 update adds CVE-2026-96940 mailbox-access flaw fix: install it on every Exchange server
Microsoft re-released the September 2026 Exchange security updates on 2 October to add CVE-2026-96940 (CVSS 8.8): a signed-in user could read other mailboxes in the same organisation. Hybrid and management-tools servers need it too.

Funding and deals5

This group on its own

1Funding news
Revnu raises 3 million dollars led by PXN Ventures for its AI sales and marketing platform
Manchester software company Revnu said on 1 October 2026 it raised USD 3 million, led by PXN Ventures with Y Combinator, to build an AI service that runs outbound, paid ads and AI-search visibility.
2Funding news
Deepslate raises 7.7 million euro for European speech-to-speech voice AI
Berlin voice-AI company Deepslate announced a EUR 7.7 million round on 1 October 2026, led by 42CAP, to train European speech-to-speech models and scale EU-hosted infrastructure.
3Funding news
Kuro raises 10 million euro round led by UVC Partners for AI platform used by general contractors
Berlin construction-software company Kuro announced a EUR 10 million round led by UVC Partners on 30 September 2026, to extend its AI platform from estimating into procurement, accounting and compliance.
4Funding news
DriveX raises about 150 million yen for AI production-planning software for manufacturers
Tokyo company DriveX said on 2 October 2026 it raised a total of about 150 million yen from operating companies and individual investors to develop its AI production-planning product for factories.
5Funding news
Trustly secures over USD 40 million in signed equity commitments from Nordic Capital and Alfvén & Didrikson; raise to conclude in November 2026
Trustly, the open banking payments company, said on 2 October 2026 that Nordic Capital and Alfvén & Didrikson signed binding commitments of more than USD 40 million for a capital raise expected to conclude in November 2026.

TrustList Weekly

The week in software and IT, in one email

The news that matters to buyers, new rankings and our own research. Every Thursday, free, and easy to leave.