TrustList daily digest

Wednesday, 7 October 2026

Everything TrustList published on this day, 39 stories, grouped by subject and each in a line of our own.

News17

This group on its own

1HR News
Austria lets single-permit holders change employer after 45 days
The law, which passed parliament as Federal Law Gazette I No. 81/2026, also lets permit holders keep status for six months of unemployment and caps most decisions at 90 days.
2Business news
Zeta Global to acquire Toronto AI firm Senso, terms undisclosed
Senso, founded in 2017 and a Y Combinator company, helps brands appear in answers from AI chatbots. Its team moves to Zeta, which gives no price or closing date.
3HR News
House bill would lift H-1B penalties to $250,000 and a 10-year ban
H.R. 10643 has five co-sponsors, all Republicans from Texas. It would also raise per-document fines for immigration document fraud. It has not passed, and current penalties still apply.
4News
Shopify caps Customer Account API at 3,000 requests a minute per customer
The limit is shared by every installed app on a store and sits on top of the existing cost-based limit; a scope-downgrade mutation arrives with API version 2027-01.
5News
Shopify POS cart calls will reject when the till refuses a change
Extensions on API version 2026-10 must catch errors on 15 cart mutations or risk stuck screens; versions 2026-07 and earlier keep the old behaviour.
6News
OneDrive adds pay-as-you-go storage billing for Microsoft 365 tenants
Admins choose which accounts may exceed their licensed quota and be billed by usage. Public preview is open to commercial tenants, with worldwide rollout from early November.
7News
OneDrive for iPhone and iPad will stop supporting iOS 18 and iPadOS 18
Microsoft gives no date in the App Store notes; devices that cannot run iOS 26 or later, such as the iPhone XS and XR, stay on an old build.
8Business news
FICO to cut about 15% of positions in AI-driven restructuring
A $27.0 million severance charge lands in the fourth quarter of fiscal 2026, and the plan should be substantially complete by the end of the third quarter of fiscal 2027.
9News
Hijacked .gh, .sl and .as domains used to get fake Google certificates
Chrome users are protected automatically, but other browsers and apps may not be. Google urges domain owners to watch certificate logs and restrict which certificate authorities may issue for them.
10News
Mexico's lower house passes digital payments law, 327 votes to 122
The Treasury could name sectors that accept only digital payment, and every level of government must take digital payment for public services. The Senate votes next.
11News
RBI says services EDF rule skips individuals, promises FAQs
The form has applied since 1 October and replaces SOFTEX for software exporters. Exporters can self-declare for bills up to Rs 10 lakh, the Governor said.
12News
Indonesia readies 50% e-commerce fee cut for local small sellers
The ministerial rule has applied since 17 June, but the discount slipped from a 1 August target to the end of October while the registration system is built.
13News
Signal says it won't comply with Canada's lawful access Bill C-22
The bill passed the House of Commons on 18 June and is now at second reading in the Senate; Tailscale and Windscribe have also opposed it.
14News
California's DROP passes 550,000 sign-ups as data brokers process deletions
Deletion processing began on 1 August; brokers have up to 90 days to report each result, and the fine for failing to delete is $200 a day per consumer.
15News
Vietnam deactivates tax numbers of nearly 180,000 businesses
More than 4,000 numbers were restored after review. About 600,000 firms had stopped operating without finishing dissolution as of June, and the clean-up targets invoice trading.
16News
Pakistan's FBR drafts rule to flag income tax return errors by machine
Taxpayers would get at least seven days to answer through the IRIS portal, with a second seven-day window after a reminder, and an officer reviews the reply before any enforcement.
17News
FTC writes to 24 healthcare firms: CMS price rules are no safe harbor
The letters cite Section 5 of the FTC Act and name no deadline or penalty. They follow a healthcare task force set up earlier this year.

Tech and security7

This group on its own

1Artificial Intelligence News
45 open-weight models, 53 closed ones and the licences between them
Eight of the 13 specified models dated October ship downloadable weights, and all eight are Apache 2.0, while only five of the 45 open rows record any price.
2Security advisories
SonicWall patches CVSS 10 pre-login flaw in SMA1000 gateways
It is the third maximum-score, pre-authentication WorkPlace request-forgery flaw SonicWall has fixed this year. Three further SMA1000 bugs were patched in the same hotfixes.
3Security advisories
FBI warns FortiBleed is still hitting exposed FortiGate VPNs
SOCRadar verified more than 86,644 compromised devices in 194 countries. The agencies say changing passwords is not enough, because attackers add admin accounts and can delete existing ones.
4Security advisories
Cisco fixes critical remote code flaws in Nexus switch software
Two advisories score 9.8 and need no login. NX-API is on by default for UCS 6300 interconnects, and neither advisory offers a workaround beyond disabling the feature.
5Security advisories
Cisco License On-Prem flaw lets anyone reset admin passwords
Versions up to 9-202601 are vulnerable and Cisco offers no workaround. A second critical bug in the same product allows unauthenticated file writes through the API.
6Security advisories
TeamCity 2026.2.1 and 2026.1.5 fix more than 40 security issues
JetBrains strongly recommends upgrading the self-hosted CI server. The release notes say 41 security problems are fixed in 2026.2.1, with the security bulletin to follow.
7Security advisories
HPE fixes 37 flaws in AOS-Switch and ClearPass Policy Manager
Sixteen are rated critical and 12 high. Italy's national cyber agency lists remote code execution and authentication bypass among the flaw types and records no public exploit or exploitation.

Funding and deals14

This group on its own

1Funding news
Fleuret raises €4m pre-seed for AI-run penetration testing
The Paris startup runs two AI agents named Emile and Champollion, has about ten staff and counts Brevo, Stoïk and Yogosha as customers. RAISE Ventures led the round.
2Funding news
Santé raises $15m Series A for AI point of sale in liquor stores
The New York company says revenue grew five times in 2025 and again this year as it sells to independent wine and liquor retailers.
3Funding news
Polygrade raises $6.3m seed for AI agents that handle warranty claims
The Toronto company, formerly called ProPay, emerges from stealth with two named home warranty customers and plans to move into extended and OEM warranty.
4Funding news
Vitalize raises $31m Series A to automate hospital staffing
The San Francisco company says its platform saves clinical leaders more than 2,000 hours a day and has cut premium labour spend by 54% at one health system.
5Funding news
Stuut raises $52.5m Series B for AI agents that run order-to-cash
The New York company closed the round ten months after its Series A and plans to add credit, lending and fund movement to its receivables software.
6Funding news
Siena raises $17m Series A to build AI customer agents for brands
The New York company, founded in 2023, says its agents already handle hundreds of millions of customer interactions for hundreds of consumer brands including SPANX and FIGS.
7Funding news
Desible.ai raises ₹32 crore to scale voice AI for banks
The Bengaluru company says its agents handle calls for banking and insurance clients and will use the Seed Plus money to widen Indian language coverage and security controls.
8Funding news
Nous Research raises $90m to build Hermes for Businesses
The open-source Hermes Agent, released under an MIT licence in February, will get a business edition. Nous does not state a round name or a headquarters city.
9Funding news
PlannerPal raises $6m led by Mercia for AI in financial advice
Ada Ventures, which led the pre-seed in February 2024, returns. PlannerPal says more than 250 UK advice firms use it and it is built into Iress Xplan.
10Funding news
Flyle raises ¥1.88bn Series A for its AI contact centre agents
The Tokyo company, founded in 2020, has now raised about ¥2.27bn in total. Its AI Operator for phone, chat and email becomes generally available in November.
11Funding news
Ampersand raises $15m to connect AI agents to CRMs and ERPs
The San Francisco company says it has worked with 11x, Orb and Square over three years, and will use the money to build an agent that maintains integrations.
12Funding news
Vocca raises $20m Series A for AI that answers patient calls
The Paris and New York company says practitioners on its platform grew from 2,000 to 15,000 in a year and that it now handles over a million patient interactions monthly.
13Funding news
TextYess raises €4m to let AI agents run ecommerce CRM
The Milan company says it serves more than 350 online brands, including Ducati, and will use the seed extension to open in the UK.
14Funding news
Cori Clinical raises $4m seed to speed up clinical trial design
The London software company, founded in 2025, says it already works with two of the five largest contract research organisations and has hired a chief clinical officer from Lindus Health.

Our research1

This group on its own

1Blog
Dated obligations ahead: what falls due from October 2026 to March 2027
Our news desk records 178 dated obligations from 130 items between 8 October 2026 and 31 March 2027. The week of 26 October is the busiest, with 25 falling due.

TrustList Weekly

The week in software and IT, in one email

The news that matters to buyers, new rankings and our own research. Every Thursday, free, and easy to leave.