TrustList daily digest

Sunday, 11 October 2026

Everything TrustList published on this day, 8 stories, grouped by subject and each in a line of our own.

News5

1News
Main Capital takes a majority stake in Paderborn IT asset firm Raynet
Previous investor Pinova sells, founder Ragip Aydin and the management reinvest, and Raynet plans faster international growth, more AI in Raynet One and selective acquisitions. No price was disclosed.
2News
Collibra buys Munich AI governance startup trail ML
trail ML, founded in 2023, automates checks against the EU AI Act, ISO 42001 and the NIST AI framework. Collibra says it will re-run assessments as evidence changes and block agent actions that break policy.
3HR News
Personio buys Circula to put expenses next to HR and payroll
Circula, used by more than 3,000 companies, keeps its DATEV link and existing integrations. Personio says salaries, benefits, expenses and company cards will run on one platform; no price or timetable was given.
4News
Bitwarden moves its app store builds to a commercial licence
The GPLv3 clients stay on GitHub with today's features, but some future components will ship only in the commercial build. Self-hosting is unchanged; resellers are the target.
5News
Contractor malware puts 8.7 million Daiichi Kosho records at risk
The Big Echo operator says the data sat on one Nippon Columbia Group employee PC. No leak or misuse is confirmed, and it is reviewing how it oversees contractors.

1Security advisories
Seven countries tie old exploited flaws to China's Integrity Tech
Advisory AA26-281A names eight CVEs, SoftEther persistence and Exchange password spraying, while the FBI seized seven domains behind the MicroScan and FishHub tools.
2Security advisories
Fake "Security Audit" GitHub workflows now sweep git histories for keys
A new GhostAction wave used hijacked maintainer accounts, including the author of an Uber repository, to plant a credential-stealing workflow. Socket counts more than 500 accounts since 7 October.

1Funding news
Procuros raises €20m to replace EDI links with AI trade connections
XAnge and W23 Global join Point Nine, Creandum, b2venture and Square One. Procuros connects suppliers and retailers to each other's ERPs in any format, from EDIFACT to PDF.

TrustList Weekly

The news that matters to buyers, new rankings and our own research. Every Thursday, free, and easy to leave.