Skip to content
TrustList

TrustList daily digest

Tuesday, 13 October 2026

Everything TrustList published on this day, 25 stories, grouped by subject and each in a line of our own.

News8

This group on its own

  1. 1News

    IonQ agrees to buy zero trust firm Elisity in stock deal worth up to $1.3bn

    Up to $150 million of the price is an earnout tied to Elisity results; the share price used is capped at $49.61 and floored at $33.07, with closing expected in the fourth quarter.

  2. 2News

    Databricks variant shredding will lock Runtime 15.4 out of new tables

    Three more dated changes follow it: the partner AI toggle disappears on 1 November, CREATE OR REPLACE VIEW keeps grants from 2 December, and old OpenSharing tokens start expiring on 8 December.

  3. 3News

    AWS bills AgentCore short-term memory per gigabyte instead of per event

    Ingestion costs $1.00 per GB, retrieval $0.20 per GB and storage $0.10 per GB-month. AWS says most workloads will pay less, with small frequent events gaining most.

  4. 4News

    Vela LatAm to buy Brazilian managed IT provider Penso, pending CADE

    Penso serves about 1,600 corporate and public-sector clients from São Paulo with five Brazilian data centres; it says brand, team and service channels stay the same.

  5. 5News

    Upwind buys Israeli AI security start-up Aegis and opens an AI lab

    No price, closing date or headcount is given. The new Upwind AI Lab will work on agent security, security benchmarks for frontier models and GPU protection.

  6. 6News

    Innovate UK opens three £5m BridgeAI calls for AI firms with a deployer

    Each competition opens on 21 October and closes at 11:00 UK time on 8 December; the lead must be a UK AI SME with a product at technology readiness level 5 to 6.

  7. 7News

    Tokyo opens CVC matching for 200 startups and SMEs with ten corporates

    Applications are taken in order of arrival until about 200 matches are made; JPX Research Institute, Ricoh, Nikon and Daiichi Life are among the corporate investors.

  8. 8News

    Google Ads API moves to two releases a month starting with v26

    Four major versions a year continue and each lasts twelve months, so v23 stops working in February 2027 and v26 in November 2027, with minors retired alongside their parent.

Tech and security8

This group on its own

  1. 1Security advisories

    Bricksforge WordPress plugin flaw lets anyone upload files, now exploited

    CVE-2026-85097 scores CVSS 10 in Patchstack's database and affects every release up to 3.1.8.9. It follows a password-reset flaw fixed in September and a privilege-escalation bug disclosed earlier.

  2. 2Security advisories

    SAP patches a CVSS 10 token flaw in its Cloud SDK for Python

    Four of the 16 new notes are critical, including code injection in S/4HANA and broken access control in NetWeaver Visual Composer; SAP reports no exploitation so far.

  3. 3Security advisories

    Ivanti Connect Secure zero-day lets attackers run commands unauthenticated

    CISA added CVE-2026-104935 to its exploited list the same day and gave US federal agencies until 16 October; the CVE record lists 25.1.3.0, 25.1.3.1 and 22.8R2.5 as unaffected.

  4. 4Security advisories

    AssetView flaw lets a logged-in Windows user gain SYSTEM rights

    JPCERT/CC rates CVE-2026-101020 at 8.5 under CVSS 4.0; Hammock says there is no workaround and that versions before 13.2.0 cannot be upgraded directly.

  5. 5Security advisories

    Docker Hub fixes critical flaw that passed access tokens to new owners

    Account-to-organisation conversion kept the old token secrets alive. Docker closed the hole in under four hours after a report and found no abuse across about 304,000 pushes.

  6. 6Security advisories

    MariaDB names five server flaws fixed in its August and September builds

    The worst, CVE-2026-107815 (CVSS 8.5), lets a user of the CONNECT engine crash the server or run code; the fixed releases have been out since 13 August, but the CVE numbers only arrived on 9 October.

  7. 7Security advisories

    ShareFile Storage Zones Controller 5.12.7 fixes a chain to code execution

    Three high severity flaws affect customer-managed zones on version 5; version 6 is not affected, and Italy's national cyber agency rates the systemic impact as medium.

  8. 8Security advisories

    CERT/CC says ten Thelia 2.6 flaws are unpatched; Thelia ships 3.2.1

    Six of the flaws give a back-office user a way to run code on the server. CERT/CC says it could not reach the maintainers, who released security fixes for the 3.x lines on 6 October.

Sectors1

This group on its own

  1. 1Modern Cars

    Hyundai commits USD 15.5 billion to India and opens its Pune plant

    About USD 700 million of the seven-year commitment goes to an Indian R&D centre with a test track, and the Pune plant starts at 170,000 vehicles a year.

Funding and deals7

This group on its own

  1. 1Funding news

    Obsero raises $1.2m seed to track how AI assistants recommend brands

    SFC Capital led the round and several customers invested; the London company says it tracked more than 10 million AI answers in its first year for clients including Zopa and Zoopla.

  2. 2Funding news

    Farmnote takes undisclosed funding to build AI agents for dairy farms

    The Hokkaido herd-management company, founded in 2013, says its cloud tracks about 380,000 cattle, roughly a tenth of Japan's; Impact Capital leads two impact funds.

  3. 3Funding news

    Trendspek raises A$6m to expand 3D asset records in the US and Europe

    The Sydney software company, founded in 2019 by three former Qantas pilots, says critical-infrastructure revenue has grown 165 per cent a year; OIF Ventures leads.

  4. 4Funding news

    Netsec raises over $10m to run IT and security as one service

    The year-old operator, based in France and Italy, bills per employee and works through Slack and Teams; Partech leads, with Primo Capital and View Different joining.

  5. 5Funding news

    Clueso raises $10m Series A to automate business video with AI agents

    Dharana Capital led the round; more than 80% of the money came from investors who backed the company at seed, and Clueso says it has been cash-flow positive almost from the start.

  6. 6Funding news

    Drylab AI raises $3m seed from Vertex to put AI agents in pharma labs

    The Singapore company launched in February and says it already has paying customers among drug makers, cancer centres and universities; Patsnap joins Vertex Ventures in the round.

  7. 7Funding news

    Autentic AI raises €1.5m pre-seed for AI-led market research

    The Spanish start-up runs about 1,000 AI-led interviews a day with paid, verified participants; Baobab, Lanai, Acurio and Masia VC invested.

Our research1

This group on its own

  1. 1Blog

    Why we are building our own text recognition into Rutba Office

    Text recognition is easy to rent and hard to own. We are choosing to own it: on your computer, in the languages our users write, and starting with the script other engines read worst.

TrustList Weekly

The week in software and IT, in one email

The news that matters to buyers, new rankings and our own research. Every Thursday, free, and easy to leave.

We will email you to confirm. Unsubscribe with one click in any issue. Privacy policy