Skip to content
TrustList

TrustList daily digest

Tuesday, 6 October 2026

Everything TrustList published on this day, 61 stories, grouped by subject and each in a line of our own.

News35

This group on its own

  1. 1News

    Italy's privacy regulator fines IQVIA €7m over patient database

    The Garante found the records of one million patients from 800 family doctors could be traced back to individuals. IQVIA has 120 days to comply and says it may appeal.

  2. 2News

    Outlook will block .msix and .msixbundle attachments from November

    The change covers new Outlook for Windows and Outlook on the web in Exchange Online. Admins who need these Windows package files must add them to AllowedFileTypes before the rollout starts.

  3. 3HR News

    UK right-to-work code now covers gig workers and sub-contractors

    Civil penalties stay at £45,000 per worker for a first breach and £60,000 for a repeat within three years. The change is in who counts as an employer, and in mandatory registered digital checkers.

  4. 4News

    Entra ID stops processing MemberOf dynamic rules on 3 November

    Dynamic groups, administrative units and entitlement auto-assignment policies that use the operator freeze in their last state, which can leave leavers with access and new starters without licences.

  5. 5Business news

    Sendcloud buys Sendy and ends shipping on it after 31 October

    Sendcloud has bought the Veenendaal platform aimed at small web shops. Terms were not disclosed, and Sendy customers must rebuild their integrations, shipping rules and shop branding in Sendcloud.

  6. 6News

    Island raises $400M to govern AI agents from its enterprise browser

    The Series F, led by Evolution Equity Partners at a $6.4B valuation, pays for an "agentic control plane" that has no release date yet.

  7. 7News

    Harvey raises $550M, lifting its valuation to $15.5B from $11B

    Diffusion and Lightspeed co-led the legal AI vendor's second round of 2026. Harvey says 80% of Am Law 100 firms use its tools; that figure is its own.

  8. 8News

    Greece puts back e-invoicing for firms under €1m to 2 November

    A transition period now runs to 31 January 2027. About 655,000 smaller businesses, roughly 70% of those affected, have already started using an invoicing provider or the free tax authority apps.

  9. 9News

    GKE drops Identity Service at version 1.37

    Clusters that sign engineers in through Identity Service for GKE must move to Workforce Identity Federation before they reach 1.37, and release channels can upgrade them automatically.

  10. 10News

    SBP starts image-based cheque clearing pilot on 15 October

    Pakistan Express Clearing System runs through the NIFT clearinghouse, with an extra daily clearing cycle in the pilot. Every member bank has to be ready for nationwide coverage by 30 April 2027.

  11. 11News

    Ireland opens €40m DTIF call for tech consortia, closing 3 February

    Call 8 of the Disruptive Technologies Innovation Fund needs at least three Irish partners, including an SME, and a minimum request of €1.5m; an information webinar runs on 22 October.

  12. 12News

    Attackers used a firm's access to take 8.8 million Danish CPR records

    The data covers living, emigrated and dead people, about 80% of the register. Datatilsynet received the breach notification on 4 October and has not yet said who is responsible.

  13. 13News

    EU court adviser says striking out legible records is not GDPR erasure

    Advocate General Laila Medina says a person can object and ask a church to erase baptism data. The Court of Justice has not yet ruled and is not bound by the opinion.

  14. 14Business news

    SAP to buy Belgian AI skills platform TechWolf, closing in Q4

    TechWolf, founded as a Ghent University project, will stay a separate company under its CEO and keep serving customers that do not run SAP. Financial terms are not disclosed.

  15. 15News

    HubSpot forces TLS 1.2 on legacy domain settings from 14 October

    Only accounts that once chose TLS 1.0 or 1.1 for HubSpot-hosted domains are touched. HubSpot dropped those protocols in its own app in March 2021 and expects no visible impact.

  16. 16Business news

    HubSpot cuts about 660 jobs, 7% of its workforce, in a reorganisation

    Chief executive Yamini Rangan says the cuts are not driven by AI savings. Product teams move from Hubs to customer outcomes, and severance runs to 30 weeks of base pay.

  17. 17News

    NITDA's software testing rules reach full effect in Q2 2027

    Nigeria's testing qualifications board has backed the guideline but wants enforcement scaled to risk, arguing a brochure website should not face the same scrutiny as a payment switch.

  18. 18Business news

    Accenture completes purchase of Danish software firm Mjølner Informatics

    Mjølner, founded in 1988 in Aarhus, serves energy, utilities and manufacturing clients in western Denmark, and Accenture will keep providing IT services to its former owner Norlys.

  19. 19HR News

    India raises the EPF wage ceiling to Rs 25,000 a month from Rs 15,000

    The Cabinet approved the change a day earlier and says it is the first revision since September 2014. The government puts the number of newly covered employees at more than 51 lakh.

  20. 20News

    Google stops paying bounties for flaws in Go, Angular and other OSS

    The pause follows a surge of automated, mostly invalid submissions. Google's rules page promises an update in the first quarter of 2027 and still accepts supply chain compromise reports.

  21. 21News

    Indonesia's House approves One Data Bill covering state data sharing

    The 141-article law replaces a 2019 presidential regulation as the legal base for government data standards, and private firms have asked for clarity on cross-border transfers.

  22. 22News

    Japan opens FY2027 government cloud tenders to supplier comment

    The Digital Agency asked suppliers for views on four FY2027 procurements and published version 2.4 of its Government Interoperability Framework the same day.

  23. 23Business news

    Ryan buys Brazilian tax technology firm Comtax to enter Brazil

    Comtax was founded in 2018 and works on SAP and Oracle tax integrations for large Brazilian companies; Ryan had almost no Brazilian staff before the deal, Baguete reports.

  24. 24Business news

    Constellation's Volaris buys Brazilian restaurant software maker Teknisa

    The 1990-founded company serves more than 900 customers in Brazil, according to Volaris, and joins a portfolio where Constellation has made about 20 Brazilian purchases since 2019, Baguete reports.

  25. 25News

    JetBrains drops Swift editing from its Kotlin Multiplatform plugin

    Swift editing, highlighting and navigation end with IntelliJ IDEA 2026.3 and Android Studio Rabbit 2. Running and debugging iOS apps from the IDE stays supported, and no replacement is planned.

  26. 26News

    Kenya's new transfer pricing rules widen what multinationals must document

    Treasury's list of items checked rises from about 10 to at least 25, Business Daily reports, and the rules draw on OECD guidelines and country-by-country reporting.

  27. 27News

    OpenAI to watermark ChatGPT and Codex text in the EU

    The textGrain mark is off by default for API customers elsewhere, and OpenAI's own tests show light editing sharply cuts detection, from about 92% to 66% when a tenth of the words change.

  28. 28News

    Malaysia plans first AI law for early 2027, digital minister says

    Gobind Singh Deo told parliament the AI Act will be risk-based, with enforcement being built alongside it; in September he said the draft was already with Cabinet.

  29. 29News

    Poland's finance ministry sets AI rules and bars vendors training on its data

    An order dated 30 September covers the ministry, tax offices and customs. It requires a central register of AI uses, staff training before use, and monthly sessions of a new AI council.

  30. 30News

    German MPs hear experts fault the d-you wallet before 2027 launch

    The Digital Identities Act, which sets the national rules for the EU identity wallet, had its first reading on 23 September and has to pass within weeks to meet the January 2027 start.

  31. 31News

    India's ad regulator ASCI orders AI labels on ads that could mislead

    The Advertising Standards Council of India says brands must label synthetic content that materially influences purchases, and mark paid AI chatbot suggestions as "Sponsored by" the brand. The rules start three months after publication.

  32. 32News

    Vietnam proposes pay of up to VND300m a month for tech chief engineers

    The proposed framework for strategic technology programmes also sets state funding of up to 100% for government-commissioned work and up to 70% for products with near-term commercial potential.

  33. 33News

    Google Workspace now deletes shared calendars along with their owner

    Secondary calendars, the rotas and team schedules users create, now disappear when their owner's account is deleted and go dark when it is suspended. Ownership has to move first.

  34. 34HR News

    Indonesia moves foreign-worker KITAS permits to the investment ministry

    Minister Rosan Roeslani now targets six days for the permit, a day longer than the five-day target announced in September, and says the change lands within two months.

  35. 35HR News

    Indonesia's House passes Labor Protection Bill with 313 articles

    The bill splits labour rules out of the Job Creation Law, as the Constitutional Court ordered in 2024, and adds severance pay reserve funds to the rules on layoffs and wages.

Tech and security8

This group on its own

  1. 1Security advisories

    Atlassian fixes critical file-read flaw in its Data Center products

    CVE-2026-21589 scores 9.3 and needs no login. Every self-managed Jira, Confluence, Bitbucket, Bamboo and Crowd version below the fixed releases is exposed; Cloud was patched first.

  2. 2Security advisories

    LibreOffice and OpenOffice patch Java code-execution flaw

    A crafted spreadsheet can load remote Java code with no macro prompt when Java support is on. A proof of concept is public, and the Apache fix is still in release candidate.

  3. 3Security advisories

    WordPress 7.1.3 fixes seven flaws, including SQL injection in export

    The release also carries four bug fixes. Security backports to older branches, reaching back to 4.7, are still in progress and will ship as each becomes ready.

  4. 4Security advisories

    Exchange Server flaw lets a signed-in user read colleagues' mailboxes

    Microsoft's second September update for on-premises Exchange fixes CVE-2026-96940 (CVSS 8.8). Exchange 2016 and 2019 servers only get it through paid extended support.

  5. 5Security advisories

    Elastic patches 14 flaws across Elasticsearch, Kibana and Endpoint

    Three are rated High, led by a Kibana Fleet flaw scoring 8.8 that lets a delegated user redirect another team data stream. Several older release lines get no fix at all.

  6. 6Security advisories

    Italy's CSIRT finds Zimbra servers hit by ransomware and miners

    Most intrusions trace to CVE-2026-73570 on servers with the optional SNMP package. In one case more than 6,000 mailboxes were down for 48 hours, and patched servers were not breached.

  7. 7Security advisories

    Apache fixes four Struts flaws, one of them OGNL code execution

    Italy's national cyber agency rates three of the four as high severity and tells users to update; Apache itself rates the code-execution bug only Moderate and limits it to one mapper.

  8. 8Security advisories

    GROWI wiki before 7.5.5 lets anyone read files on private pages

    Only installations that store uploads locally are exposed. JPCERT/CC rates the flaw 6.9 on the CVSS 4.0 scale, and the vendor has released version 7.5.5 with the fix.

Sectors2

This group on its own

  1. 1Robotics & Automation

    Two wholesalers report what Exotec Skypod robots changed for them

    First Supply picks about ten times faster than by hand, while TRUSCO NAKAYAMA's 89,162 square metre centre runs 37 Skypod robots across 31,975 bins.

  2. 2Robotics & Automation

    Doosan Robotics wins two Korean Physical AI projects worth KRW 98.9 billion

    About KRW 68.1 billion of the budget is government money. One project builds cobots with on-device AI chips, the other an AI welding system for Doosan Enerbility.

Funding and deals9

This group on its own

  1. 1Funding news

    Vates raises €30m from IRIS and Bpifrance, its first outside round

    The Grenoble maker of the XCP-ng and Xen Orchestra virtualisation software says it has been profitable since 2016, that the founders keep the majority and that both products stay open source.

  2. 2Funding news

    OneByZero raises $20m to run AI agents inside Asian enterprises

    The Singapore company's first outside money, led by Jungle Ventures, pays for engineers in nine markets, an office in Japan and its NEO agent-governance platform.

  3. 3Funding news

    Cleavr raises €8m to chase unpaid invoices with AI

    Six months after a €1m pre-seed, the French start-up says more than 100 businesses took up its collection software in its first seven months.

  4. 4Funding news

    SimpL raises €1.2m pre-seed for pay-per-meeting B2B sales AI

    The Milan start-up, active since 2025, charges no per-user subscription or upfront fee and bills customers only for qualified meetings that take place.

  5. 5Funding news

    hexafarms raises €4.8m for AI crop monitoring in greenhouses

    The Berlin company also won a Rentenbank start-up grant and a subordinated loan of up to €800,000, and says growers in 13 countries use its system.

  6. 6Funding news

    Flai raises $27m Series A led by Base10 for dealership AI agents

    The US start-up founded in 2025 also launched an AI-native service and sales CRM, and says revenue grew more than 20 times in its first year across hundreds of dealerships.

  7. 7Funding news

    Hadrian raises $40m Series B for AI-driven penetration testing

    The Amsterdam company has now raised $65m in total, and says its customers include McKesson, NBCUniversal, TotalEnergies and Amadeus.

  8. 8Funding news

    Nettle raises $4.8m seed to speed up insurance risk inspections

    Founded in 2024 by two former QuantumBlack consultants, the London and New York company counts Allianz and Brotherhood Mutual among its customers and has now raised $6.8m in total.

  9. 9Funding news

    Falcon AI raises €1.5m to review company contracts for a flat fee

    The Ghent legal-tech start-up was founded in 2026 by the team that sold Mbrella to D'Ieteren, and prices its AI-plus-lawyer review from €1,000 a month with no overage fees.

Our research7

This group on its own

  1. 1Blog

    Vendors gave a median 48 days' warning before changing what customers use

    Of 40 vendor-change items our desk published from 20 September to 5 October, 27 record both dates: median notice 48 days, range 0 to 390, and 12 gave a month or less.

  2. 2Blog

    Edge devices are attacked first, application servers after the patch

    Of 30 exploited flaws our desk reported in three weeks, 14 were attacked by the day a fix appeared, ten of them on edge devices, and 11 after a fix existed, nine of them in application servers.

  3. 3Blog

    Of 39 software deals we covered, only 9 said what happens to customers

    Our desk logged 39 software and IT-services deals and 12 vendor layoff announcements in two weeks: 19 deals had closed, 17 awaited approval, and nine carried any promise to customers, none with a stated period.

  4. 4Blog

    Pakistan issued the most rules in our records, Brazil set the most dates

    Of 60 items on rules outside the EU and US, Pakistan supplies 10 but only four carry a date, while Brazil's five supply 8 of the 35 entries in our calendar to 31 January.

  5. 5Blog

    Why every TrustList ranking now has a separate order for SMEs

    Age and size lift the largest firms. Every ranking in the Q4 2026 edition now has an SME view: firms under 250 staff, ordered without age points, with shared places rotating daily.

  6. 6Blog

    TrustList rankings now come in editions, with a reason on every place

    The Q4 2026 edition covers 13,736 ranking pages. On 6,519 of them every rank number now comes with a dated reason drawn from evidence, and businesses we cannot yet rank are listed without one.

  7. 7Blog

    How we now decide who belongs in a ranking, and who leads it

    Place tags put firms from London, Ontario, on our London rankings. Now place takes evidence, no business leads more than five rankings, and reviews count only from accountable reviewers.

TrustList Weekly

The week in software and IT, in one email

The news that matters to buyers, new rankings and our own research. Every Thursday, free, and easy to leave.

We will email you to confirm. Unsubscribe with one click in any issue. Privacy policy