Skip to content
TrustList

TrustList daily digest

Thursday, 15 October 2026

Everything TrustList published on this day, 40 stories, grouped by subject and each in a line of our own.

News18

This group on its own

  1. 1News

    Prime Intellect buys Moondream; Moondream Cloud closes 13 November

    Moondream's open vision models stay open, but customers of its hosted inference and Lens products must move to Prime or elsewhere within 30 days. Terms were not disclosed.

  2. 2News

    Cohere plans to buy AISLE, the AI bug hunter behind 500 CVEs

    The letter of intent follows Cohere's purchases of Reliant AI and Aleph Alpha. AISLE, founded in 2025 by former Avast chief Ondrej Vlcek, found 18 of the 24 flaws in curl's latest release.

  3. 3News

    Uganda regulator moves against 4,000 unlicensed public Wi-Fi resellers

    The Uganda Communications Commission says resellers undercut licensed operators at UGX 1,000 per gigabyte and cost about UGX 148 billion a year in tax. Routers will be seized and equipment imports blocked.

  4. 4HR News

    Denmark cuts work permit salary bar to DKK 322,000 for 16 countries

    The new scheme starts on 1 January 2027 for jobs covered by a collective agreement. Employers must be certified by SIRI first, with applications expected to open in early December.

  5. 5News

    Windows now blocks NTLMv1 single sign-on by default on 24H2 and later

    Wi-Fi, Ethernet and VPN links that sign in automatically with MS-CHAPv2 can stop connecting on devices without Credential Guard. Windows has logged the dependency in audit mode since August 2025.

  6. 6Business news

    Intuit agrees to buy Sequence to bring usage billing to QuickBooks

    Sequence, founded in 2021 and based in London and New York, automates quoting, billing, collections and revenue recognition. Terms were not disclosed; Intuit will keep supporting Sequence customers.

  7. 7News

    Windows 10 Enterprise LTSC 2021 stops getting updates on 12 January 2027

    Microsoft's 90-day reminder says the January 2027 security update is the last. Its fix is Windows 11 Enterprise LTSC 2024 or paid Extended Security Updates.

  8. 8News

    Windows Server 2016 gets its last security update in January 2027

    Essentials-specific features such as Remote Web Access lose support the same day, ESU covers only Standard and Datacenter, and Server 2022 moved to extended support on 13 October.

  9. 9News

    Microsoft moves Copilot Business pay-as-you-go default to 1 December

    New Copilot Business licences bought through CSP will come with usage billing switched on and a limit of 4,000 Copilot Credits per user a month. Eleven countries, among them Germany, France and India, are left out at first.

  10. 10News

    Power Platform cuts off old Azure DevOps connections by 30 November

    Flows, canvas apps and agents that use an Azure DevOps connection created before 1 September 2024 rely on a legacy app registration Microsoft has started removing. Each connection has to be made again.

  11. 11News

    Microsoft's managed risk-remediation policy turns on from 28 October

    Microsoft added a managed Conditional Access policy and security group to Entra ID P2 tenants. It switches from report-only to On after 30 days unless you change it.

  12. 12Business news

    Lineal buys Swiss forensics and eDiscovery firm Forentec

    The Kansas City legal technology company gains a base in Switzerland and Forentec's cyber security and OSINT teams. Founder Lionel Bloch stays; no price was given.

  13. 13News

    Mexico delays electronic customs value filing to 31 October

    From 1 November the MVE moves to the single trade window in stages by customs regime, ending with permanent imports on 15 January 2027. Transport documents and origin certificates stay exempt.

  14. 14News

    HubSpot turns on AI credit limits by default and lets seats become credits

    The default ceiling sits up to 50% above an account's monthly credits. Customers can also cap their marketing contacts tier and buy credits in flat monthly packs or pay as they go.

  15. 15News

    Italy opens the Transizione 5.0 completion filing for super-depreciation

    Companies whose bookings were confirmed can now certify finished investments on the GSE platform. The relief covers digital and energy investments made from 2026 to 30 September 2028.

  16. 16HR News

    Humanly buys CareerArc to add recruitment marketing to AI hiring

    CareerArc brings HireSocial and Job Maps to a platform that screens and interviews candidates by chat, phone and video. Price and closing terms were not disclosed.

  17. 17News

    Germany sets 2030 deadline for quantum-safe encryption in high-risk systems

    The interior ministry, the digital ministry and the BSI publish Germany's guideline for the EU post-quantum roadmap. It is aimed at public bodies and at companies, including critical infrastructure operators.

  18. 18News

    ASD Essentials replaces the Essential Eight's single maturity score

    ASD launched the framework with chapters for enterprise IT, operational technology and cloud. The Essential Eight stays online during the transition and agencies are assessed against both next year.

Tech and security9

This group on its own

  1. 1Security advisories

    Next.js 16.4.1 fixes two critical flaws that need no login to exploit

    One flaw sits in image optimisation of SVG files and reaches back to Next.js 10; the other hits the use cache directive in 16.x and has no workaround. A third advisory fixes a Server Actions denial of service.

  2. 2Security advisories

    Cisco patches exploited root-access flaw in Secure Email Gateway

    CVE-2026-76519 scores 9.8, was found in Cisco's own scanning, and can be fixed without a restart by updating the Content Scanner Tools package.

  3. 3Security advisories

    Drupal fixes critical Field UI flaw with a no-login path via add-ons

    SA-CORE-2026-014 scores 19 out of 25. Sites on 11.2 or 10.5 and older have no patch; uninstalling the Field UI module blocks the flaw until an upgrade is possible.

  4. 4Security advisories

    Ahsay says its first AhsayCBS patches were incomplete and ships new hotfixes

    The backup server maker now tells partners on versions 7 to 10 to apply hotfix 10.3.4.45 or 9.15.2.70 and to rebuild any server that shows signs of compromise from a clean install.

  5. 5Security advisories

    AWS patches Gremlin import flaw in Amazon Neptune graph database

    Bulletin 2026-136-AWS covers every engine from 1.2.0.0. Clusters with automatic minor upgrades get the fix in their next maintenance window; the rest must move to 1.4.7.1, 1.4.8.1 or 1.5.0.0.

  6. 6Security advisories

    Palo Alto Networks fixes exploited root-level flaw in PAN-OS

    The company found CVE-2026-0322 itself, saw very limited attacks from three IP addresses, and lists no workaround. One fix, for 11.2.16, was still due on 15 October.

  7. 7Security advisories

    Exploit attempts hit Langflow flaw that runs any command via MCP

    Any signed-in Langflow user could run shell commands on the server by adding an MCP server. The flaw was patched in September; a related one was fixed only in 1.10.3, and the current release is 1.12.6.

  8. 8Security advisories

    Slican fixes three flaws in IPx phone exchanges; old models stay exposed

    CERT Polska says a hardcoded key lets anyone with the firmware files decrypt traffic. The fix needs IPx 6.62.0100; CCT-1668, MAC-6400 and CXS-0424, discontinued in 2011 and 2012, will not get one.

  9. 9Security advisories

    nginx 1.31.7 and 1.30.6 fix five flaws, one present since 2005

    The alias and rewrite overflow affects every release since 0.1.29. The fix release also moves HTTP/2 to RFC 9218 prioritisation and adds MaxMind DB support to the GeoIP modules.

Sectors3

This group on its own

  1. 1Robotics & Automation

    Agility's Digit 5 humanoid will recharge in nine minutes after 90 minutes' work

    Nyobolt supplies the battery. Agility expects early access in the first half of 2027, with broader availability in the following six to nine months.

  2. 2Modern Cars

    BMW starts Gen6 battery production in Shenyang for China-built Neue Klasse

    Cylindrical cells hold over 20% more energy than the last generation, and BMW says charging speed and range gain up to 30%. Woodruff and San Luis Potosi follow.

  3. 3Autonomous Vehicles & Mobility

    TIER IV and Munich's TUM set up a center for safe open-source driving software

    TIER IV funds three TUM research groups in a multi-year collaboration built on the EDGAR research car, which ran public demonstration rides at IAA MOBILITY 2025.

Funding and deals10

This group on its own

  1. 1Funding news

    Tamr raises $21m growth equity led by Volition Capital

    Tamr, spun out of MIT research in 2013, says its SaaS revenue more than doubled in its last fiscal year. Old Mutual is the only customer the release names.

  2. 2Funding news

    Scanntech raises $180m Series F for Latin American retail sales data

    Founded in Uruguay in 1992, the company reads ticket-level sales straight from shop tills. Partners Group co-led, and Warburg Pincus, IFC and Endeavor keep their stakes.

  3. 3Funding news

    Zenzap raises $44m Series A to put AI agents in work chat

    Lightspeed leads with Bessemer after three years in stealth. Zenzap says thousands of businesses in the US, UK and Australia already use its messaging app daily.

  4. 4Funding news

    ACIMUS raises ¥65m for AI that builds BIM models from plain language

    Link Capital led the Tokyo startup's seed round, with Incubate Fund and JR East Startup, which also signed a business alliance after trials on station buildings. ACIMUS was founded in September 2024.

  5. 5Funding news

    Harmonic Security raises $50m Series B to govern workplace AI use

    Total funding reaches $76m, the company says, with more than 90 staff across San Francisco and London. Crosspoint Capital Partners led; the earlier Series A was $17.5m.

  6. 6Funding news

    Modal raises $750m Series D as AI compute run rate passes $1bn

    Accel led the round at a $15.75 billion post-money valuation, five months after Modal's Series C. Its Sandboxes product alone runs at $300 million a year, and a London office has opened.

  7. 7Funding news

    Ocean raises about ¥500m for Japan tax-free refund platform

    The Tokyo company, founded in May 2024, is building for the November 2026 switch of Japan duty-free shopping to a refund system. Ocean Tax Refund is its product.

  8. 8Funding news

    Labelbox raises over $100m Series E after turning profitable

    Infinitum Partners led a mix of equity and a credit facility at a stated $1.25 billion pre-money valuation. The 2018 company now sells training environments to AI labs and managed agents to enterprises.

  9. 9Funding news

    Elevatry raises €3m pre-seed for AI agents in strategic procurement

    Bayern Kapital, the consultancy H&Z and six business angels back the Munich start-up, whose platform went live on 28 September. Its chief executive founded riskmethods, later sold to Sphera.

  10. 10Funding news

    AZOO raises ¥490m in total for its WASIMIL hotel operating system

    The Kyoto company, founded in January 2020, says its hotel OS joins more than 15 functions on one data foundation, and it is now building AI agents for back-office work.

TrustList Weekly

The week in software and IT, in one email

The news that matters to buyers, new rankings and our own research. Every Thursday, free, and easy to leave.

We will email you to confirm. Unsubscribe with one click in any issue. Privacy policy