Skip to content
TrustList

TrustList daily digest

Monday, 19 October 2026

Everything TrustList published on this day, 17 stories, grouped by subject and each in a line of our own.

News10

This group on its own

  1. 1News

    Let's Encrypt will check domains from six remote vantage points

    Two new remote perspectives go into staging on 27 October and production on 10 November, ahead of the CA/Browser Forum rule that requires at least five from 15 December; geo-blocked challenge paths are the thing to check.

  2. 2Business news

    Boomi buys Elementary to add data observability to its platform

    Elementary began as an open-source project in 2022 and says 1,500 data teams use it; Boomi, which bought Lunar.dev and Rivery before it, did not disclose terms.

  3. 3News

    KOLC+ adds a ¥10,000 single-project plan for Japan public works

    The BIM/CIM cloud from Tokyo's KOLG takes quote requests for its new ASP plan from 4 January and starts it on 1 April 2027, after meeting the land ministry's mandatory requirements for construction work in September.

  4. 4News

    Europe: funding calls and deadlines closing soon (week of 19 October 2026)

    Calls for software, AI, robotics and mobility firms closing by the end of November across France, Germany, Ireland, Italy, Luxembourg and EU programmes, with deadlines, eligibility and amounts as each funder states them.

  5. 5News

    Innovate UK opens three £5m BridgeAI calls for AI deployment

    UK AI SMEs paired with a larger deployer can bid for £100,000 to £200,000 in Phase 1 from 21 October to 8 December, the first step of a programme Innovate UK expects to grow to £52 million.

  6. 6News

    UAE drops local storage rule and pauses e-invoicing inside tax groups

    Ministerial Decision 197 of 2026 exempts transactions inside a VAT tax group for 24 months from January 2027 and repeals the two-day system-failure notice; a separate decision gives pre-approved providers until the end of October.

  7. 7News

    EU publishes EN 18286, the first harmonised standard under the AI Act

    Providers of high-risk AI systems that follow the CEN and CENELEC quality management standard now get a presumption of conformity with Article 17, more than a year before the high-risk rules apply.

  8. 8News

    October Windows Server updates can stall on-premises Exchange

    Microsoft traces OWA failures, growing mail queues and DAG quorum loss to a new Endpoint Mapper limit in the October Windows Server updates, and says not to uninstall them but to raise the limit in the registry.

  9. 9News

    DHS bars DeepSeek and products built on it from US civilian agencies

    Exclusion and Removal Order 2026-01 under the supply chain security act reaches third-party products built on DeepSeek, not only DeepSeek's own apps; agencies had 60 days to ask for exceptions.

  10. 10News

    Costa Rica makes businesses register SINPE Móvil numbers for tax

    Decree 45953-H, in force since its publication in La Gaceta, adds the phone numbers used to take SINPE Móvil payments to the tax register; Hacienda has three months to set the rules and registered taxpayers then get twelve.

Tech and security4

This group on its own

  1. 1Security advisories

    Magento BlockStrap flaw rated 10.0 needs a manual patch

    Adobe fixed the unauthenticated code-execution bug in APSB26-153 on 13 October, but a plain Composer install stays vulnerable, Open Source 2.4.6 and older get no public patch, and the September hotfix is still needed.

  2. 2Security advisories

    Redis RESTORE flaw now exploited, five months after the fix

    Canada's Cyber Centre says CVE-2026-25243, which lets an authenticated user run code through a crafted RESTORE payload, is being exploited; fixed Redis releases have been out since 5 May.

  3. 3Security advisories

    Apache Camel fixes 38 flaws; 4.14 users get no patch

    Thirteen of the 38 advisories are rated High, including Java deserialization in camel-jgroups and camel-spring-redis; fixes ship in 4.18.5, 4.22.1 and 4.23.0, and 35 of them also affect the end-of-life 4.14 line.

  4. 4Security advisories

    Rank Math PRO 3.0.123 shipped malware for eleven hours

    Sites that installed and activated the WordPress SEO plugin's 3.0.123 release between 15 October 20:02 UTC and 16 October 07:12 UTC should be treated as compromised; the clean release is 3.0.124.

Sectors1

This group on its own

  1. 1Robotics & Automation

    Siemens and NVIDIA run AI planning agents in Erlangen factory

    An agent proposes production plans and tests them in a digital twin, and synthetic images train PCB inspection before prototypes exist; Siemens claims up to 85% less engineering effort on ramp-up.

Funding and deals2

This group on its own

  1. 1Funding news

    Opsin raises $21m to police what enterprise AI agents do

    SYN Ventures and Race Capital led the round; Opsin, which began by finding data overshared through Copilot, now watches agents across Microsoft, OpenAI, Google and Anthropic platforms.

  2. 2Funding news

    Beff closes ¥750m Series A for battery manufacturing software

    A ¥300m final tranche from Sumisho Venture Partners and JA Mitsui Lease's fund brings the Tokyo startup, founded by two former Nissan battery engineers in 2023, to ¥950m raised in total.

TrustList Weekly

The week in software and IT, in one email

The news that matters to buyers, new rankings and our own research. Every Thursday, free, and easy to leave.

We will email you to confirm. Unsubscribe with one click in any issue. Privacy policy