Skip to content
TrustList

TrustList daily digest · Tech and security

Wednesday, 7 October 2026

Tech and security: the stories TrustList published on this day, each in a line of our own. Open a story for the whole piece and its sources.

Tech and security7

  1. 1Artificial Intelligence News

    45 open-weight models, 53 closed ones and the licences between them

    Eight of the 13 specified models dated October ship downloadable weights, and all eight are Apache 2.0, while only five of the 45 open rows record any price.

  2. 2Security advisories

    SonicWall patches CVSS 10 pre-login flaw in SMA1000 gateways

    It is the third maximum-score, pre-authentication WorkPlace request-forgery flaw SonicWall has fixed this year. Three further SMA1000 bugs were patched in the same hotfixes.

  3. 3Security advisories

    FBI warns FortiBleed is still hitting exposed FortiGate VPNs

    SOCRadar verified more than 86,644 compromised devices in 194 countries. The agencies say changing passwords is not enough, because attackers add admin accounts and can delete existing ones.

  4. 4Security advisories

    Cisco fixes critical remote code flaws in Nexus switch software

    Two advisories score 9.8 and need no login. NX-API is on by default for UCS 6300 interconnects, and neither advisory offers a workaround beyond disabling the feature.

  5. 5Security advisories

    Cisco License On-Prem flaw lets anyone reset admin passwords

    Versions up to 9-202601 are vulnerable and Cisco offers no workaround. A second critical bug in the same product allows unauthenticated file writes through the API.

  6. 6Security advisories

    TeamCity 2026.2.1 and 2026.1.5 fix more than 40 security issues

    JetBrains strongly recommends upgrading the self-hosted CI server. The release notes say 41 security problems are fixed in 2026.2.1, with the security bulletin to follow.

  7. 7Security advisories

    HPE fixes 37 flaws in AOS-Switch and ClearPass Policy Manager

    Sixteen are rated critical and 12 high. Italy's national cyber agency lists remote code execution and authentication bypass among the flaw types and records no public exploit or exploitation.

TrustList Weekly

The week in software and IT, in one email

The news that matters to buyers, new rankings and our own research. Every Thursday, free, and easy to leave.

We will email you to confirm. Unsubscribe with one click in any issue. Privacy policy