Skip to content
TrustList

TrustList daily digest

Friday, 16 October 2026

Everything TrustList published on this day, 15 stories, grouped by subject and each in a line of our own.

News8

This group on its own

  1. 1News

    Pakistan's FBR moves the 2026 tax return deadline to 31 October

    The second extension this season follows requests from trade bodies and tax bar associations after IRIS portal problems. Filers already moved from 30 September to 15 October get another 16 days.

  2. 2News

    CMA proposes special status for Microsoft in UK business software

    Comments close at 5pm on 13 November and the final decision is due by 13 February 2027. Copilot, security bundling and where Microsoft licences can run are first on the roadmap.

  3. 3HR News

    Hong Kong starts MPF Full Portability for newer staff on 21 December

    Employees hired on or after 1 May 2025 can move their employer mandatory MPF contributions to a scheme of their choice. Phase Two, for everyone else, needs a bill due by mid-2027.

  4. 4Business news

    Proofpoint agrees to buy Varonis for about $6.3 billion in cash

    The Thoma Bravo-owned email security firm adds Varonis's data security platform. Varonis tells customers nothing changes before the deal closes, expected in the first half of 2027.

  5. 5News

    Norway fines Microsoft-owned Xandr €8.6m over Grindr ad data

    NOK 92 million is the highest fine the Norwegian authority has issued. It rejected Xandr's defence that consent was Grindr's job, and Xandr has three weeks to appeal.

  6. 6News

    Austria now blocks business SMS from unregistered sender names

    More than 8,500 sender names are on the RTR register, operators must check it before delivery and are liable for breaches, and direct alphanumeric SMS from abroad is to be banned.

  7. 7News

    Leap seconds end as UTC becomes continuous on 20 May 2027

    The 28th General Conference on Weights and Measures brought the change forward from 2035, citing a 30% chance of a first negative leap second by then and the cost of preparing for one.

  8. 8News

    Microsoft Edge will switch off built-in XSLT from mid-December

    Edge 159 disables the XSLTProcessor API and XSL stylesheet instructions by default. A temporary XSLTEnabled policy buys time until Edge 176 in summer 2027.

Tech and security6

This group on its own

  1. 1Security advisories

    Chrome 155 update fixes ten security bugs, one rated critical

    Version 155.0.8059.84/.85 patches a critical use-after-free in Prerender and six high-severity bugs, four of them in the V8 engine. Hong Kong's CERT warns of remote code execution.

  2. 2Security advisories

    Nextcloud's built-in Collabora server flaw was exploited before disclosure

    CVE-2026-110447 lets an attacker run commands on a Nextcloud server with no login while the built-in CODE server is down. A fix shipped on 11 September; the CVE followed on 14 October.

  3. 3Security advisories

    Cisco Meraki hardening release covers seven flaw classes, top score 9.6

    Every Meraki MX, MR, MS, MG and MV device and Campus Gateway is affected whatever its settings. Some fixed builds arrive only in late October or mid-November, and there are no workarounds.

  4. 4Security advisories

    BeyondTrust Remote Support flaw exploited as a zero-day since August

    CVE-2026-102764 scores 9.3 and affects Remote Support 26.2.3 and earlier. Mandiant traced exploitation to late August; versions before 24.3.1 get no patch and must be upgraded.

  5. 5Security advisories

    Linux kernel flaw lets a guest VM read and crash its host

    CVE-2026-99999, nicknamed PwnEscape, scores 9.3 and sits in the IPv4 checksum code every host kernel runs. Fixed stable kernels range from 5.10.272 to 7.2.11.

  6. 6Security advisories

    Windows 11 October update can stop Smart App Control turning back on

    KB5127648 for versions 24H2, 25H2 and 26H2 can grey out the switch once the feature is off. Microsoft gives a registry fix and two Group Policy packages until a permanent fix ships.

Funding and deals1

This group on its own

  1. 1Funding news

    North.cloud raises $60m to automate cloud and AI spending

    PeakSpan Capital leads the Brooklyn company's Series B, which follows a $5 million round in June 2025. North says it manages nearly $2 billion of customers' cloud spend.

TrustList Weekly

The week in software and IT, in one email

The news that matters to buyers, new rankings and our own research. Every Thursday, free, and easy to leave.

We will email you to confirm. Unsubscribe with one click in any issue. Privacy policy