TrustList daily digest

Wednesday, 14 October 2026

Everything TrustList published on this day, 27 stories, grouped by subject and each in a line of our own.

News4

This group on its own

1News
Google doubles Gemini 4 Argon API prices from 1 December
Standard input rises from $2 to $4 per million tokens and output from $10 to $20; batch, flex and priority rates double on the same day, and the model stays off the free tier.
2News
Deno Deploy to shut in six months as Deno team joins Cloudflare
The Deno runtime gets a year of monthly bug and security releases, then development ends; JSR keeps running on Cloudflare, and paying Deploy customers get help moving to Workers.
3News
Freshworks agrees to buy Torii to track SaaS and AI spending
Torii, founded in 2017, tracks AI consumption down to the token; Freshworks expects the deal to close in its fourth fiscal quarter of 2026 and has not given a price.
4News
Shopify switches off its Global Catalog REST API on 2 November
All calls to discover.shopifyapps.com/global fail from that day, saved catalogs included; apps must move to Global Catalog MCP, while the new Shop MCP adds carts and Shop Pay checkout for agents.

Tech and security7

This group on its own

1Security advisories
Commvault patches critical command execution flaw in its CVFS storage
One of ten Commvault advisories issued on 13 October, CVE-2026-77099 scores 9.3 and needs no login; on 11.36 and 11.40 the Commvault upgrade must come before the CVFS update.
2Security advisories
Microsoft fixes 1,413 flaws, one Windows Shell bug already exploited
CISA gave US federal agencies until 16 October to patch CVE-2026-96951, a Mark of the Web bypass; 72 of the month's fixes are rated critical, most of them in Windows and Office.
3Security advisories
Fortinet patches SQL injection in FortiAnalyzer, FortiManager, FortiMail
Four CVEs let a low-privileged user run commands on FortiAnalyzer and FortiManager; the 7.2 line gets no fix and must move to a newer release, and version 8.0 is not affected.
4Security advisories
Adobe fixes CVSS 10 flaws in ColdFusion and Experience Manager
Neither bulletin reports exploitation, but ColdFusion servers have been attacked soon after past patch days; AEM 6.5 customers must apply named hotfixes on top of their service pack.
5Security advisories
CERT-In warns fintechs that attackers are draining payout APIs
Rated critical, the advisory to NBFCs, digital lenders, payment firms and wallets says attackers call disbursal APIs with stolen bank credentials from the victims' own whitelisted servers.
6Security advisories
curl 8.23.0 fixes 24 flaws, one rated high, and drops SMB support
The high-rated flaw, CVE-2026-92392, is a use-after-free in HTTP/2 uploads affecting curl 8.12.0 to 8.22.0; the other 23 are rated low, and several leak credentials across origins.
7Security advisories
Attackers exploit SiteGuard WAF flaw that runs commands as root
EG Secure Solutions told support customers on 29 September; JPCERT/CC says the host-based WAF is widely used in Japan and warns that upgrading can erase the traces of an attack.

Sectors1

This group on its own

1Autonomous Vehicles & Mobility
Taisei and TIER IV test three self-driving cars in a tunnel for Japan's MLIT
The eight-day trial, set for late October to early November, tests platooning and two-way driving in dedicated logistics lanes with passenger-car-based test vehicles.

Funding and deals7

This group on its own

1Funding news
RevRag AI raises $2.5m for in-app AI agents at banks and lenders
The Bengaluru company, founded in 2022, bought the LLMOps start-up GenStaq.ai last year and says it works with more than 45 financial institutions, including PhonePe and Bajaj Finance.
2Funding news
Duvo raises $32m Series A to run enterprise work with AI agents
Founded in 2025 by the team behind online grocer Rohlik, Duvo counts Morrisons, Holland & Barrett and Notino as customers and holds SOC 2 Type II and ISO 42001 certification.
3Funding news
Avarra raises $17m Series A to coach sales teams with AI avatars
Founded in 2023 and based in San Mateo, Avarra says its ARR grew more than 400% in a year and that sales teams run over 10,000 coaching sessions each week.
4Funding news
Causa Prima raises $20m seed for agents that settle invoice disputes
Causa Prima was founded by Maex Ament, who started supply-chain finance firm Taulia; it has raised $30 million in total and claims over 3,000 accounts on its network.
5Funding news
Parallel Loop raises $6.6m seed to run AI projects for enterprises
Founders Prateek Jogani and Yujun Chean sold their insurtech FairDee to Qoala in 2021; their new firm lists Havells, Licious and Tokio Marine among its named clients.
6Funding news
Alchera raises £2.7m to turn transport data into decisions
The Cambridge company sells Alchera Data Hub, Alchera Bus and Alchera Highways to councils and highways operators, and a Maven-managed fund leads a round topped up by Innovate UK.
7Funding news
Pluto Security comes out of stealth with $42m for AI agent security
A year after it was founded, the Israeli company says it secures more than 1.5 million endpoints and has reached multi-million-dollar annual recurring revenue.

Guides3

This group on its own

1Funding guides
Tax relief on a 100,000 startup stake runs from nothing to half: five countries compared
UK SEIS returns half a 100,000 stake at once and cuts the cost of failure to 27.5p in the pound. US QSBS gives nothing up front but can make the gain tax-free. Ireland, France and Germany sit between.
2Funding guides
Most public startup money cannot be applied for directly: how co-investment works
Of 67 public startup programmes we list, 32 invest through or alongside private investors and 20 cannot be applied to directly. How the British Business Bank, EIC, SBIC, SSBCI, Israel and SVC match private money.
3Funding guides
Small companies on stock exchanges: how 10 growth markets compare
AIM sets no minimum trading record; India's SME platforms want three years and a profit test. Nomu admits only qualified investors. We compared entry rules, advisers, who may buy and insider lock-ins on ten growth markets.

Our research5

This group on its own

1Blog
E-invoicing mandates: 14 deadlines in nine countries over the next 12 months
From the UAE on 30 October to Spain in October 2027, 14 e-invoicing deadlines fall in nine countries within a year. Clearance, Peppol and post-audit models need different software; here is what to ask a provider.
2Blog
The change calendar: 171 software, tax and rule deadlines from our reports
From our reports: 171 dated changes from 15 October 2026, 121 of them by the end of January. Product retirements, AI model removals, price changes, e-invoicing go-lives, new rules and grant deadlines, month by month.
3Blog
What an AI task costs: a 200-fold spread across 38 priced models on our board
A 50,000-token summary costs a quarter of a cent on the cheapest text model on our board and 60 cents on the dearest. We priced five tasks across 38 models, and list the launch prices and premiums that change the bill.
4Blog
What the Church of England and other asset owners want from small companies
The Church Commissioners hold 5.1% of their fund in venture capital but reach startups through managers. In our October count, pensions and sovereign funds backed only six of 102 rounds, all at Series B or later.
5Blog
Corporations joined 39 of the 102 startup rounds we covered but led only two
We sorted every investor in 102 October rounds: companies or their venture arms took part in 39 but led two. Suppliers, customers and platforms buy a window, demand and an option. Here is what founders give up.

TrustList Weekly

The week in software and IT, in one email

The news that matters to buyers, new rankings and our own research. Every Thursday, free, and easy to leave.