TrustList daily digest · News

Wednesday, 21 October 2026

News: the stories TrustList published on this day, each in a line of our own. Open a story for the whole piece and its sources.

News9

1News
Croatia lets small firms issue e-invoices free before the 2027 mandate
The Tax Administration's MIKROeRAČUN app can now issue and fiscalise eRačuni for taxpayers outside the VAT system, ahead of the legal obligation to issue e-invoices from 1 January 2027.
2News
Swiss court: PostFinance needs express consent before taking voiceprints
The Federal Administrative Court backs the data protection commissioner: staying on the line after a recording notice is not consent. PostFinance has until mid-February 2027 to get consent or delete.
3News
Chrome now asks permission before every insecure HTTP connection
The warning first shipped to Enhanced Protection users and is now on by default for everyone. Single-label intranet names and local IP addresses are exempt, but internal sites on public domains are not.
4News
EU opens Digital Services Act case against Booking.com over scams
The Commission will examine fake listings, phishing that abuses guest data shared with hotels, and whether paid visibility through higher commission is labelled as advertising.
5News
Hamburg makes its privacy regulator the AI Act watchdog for city agencies
From 1 January 2027 the HmbBfDI supervises AI systems that Hamburg's public bodies buy, deploy or use, from police biometrics to school grading, and offers regulatory sandboxes. Private firms stay with the Bundesnetzagentur.
6News
Microsoft 365 Apps version 2611 removes Publisher from November
Subscribers lost Publisher on 1 October, but the removal update only reaches Current Channel in mid-November and Monthly Enterprise in early December. Microsoft says the gap is not an extension.
7News
auDA says existing .com.au holders keep current rules under reform
A panel wants com.au and net.au names to match a personal name, registered name or trade mark. auDA now proposes that no current licence is affected, with draft rules out for consultation later this year.
8News
TeamUpdraft breach exposes UpdraftCentral keys that can command WordPress sites
Customer records, hashed passwords and connection keys for UpdraftCentral, UpdraftVault and UpdraftClone were taken in a weekend intrusion. UpdraftPlus 1.26.13 and 2.26.13 cut every old UpdraftCentral link.
9News
curl will handle low and medium security bugs in public from 26 October
Faced with a flood of vulnerability reports, the curl project keeps only High and Critical issues private on HackerOne. Everything else goes to public GitHub issues, and old reports will be disclosed.

TrustList Weekly

The week in software and IT, in one email

The news that matters to buyers, new rankings and our own research. Every Thursday, free, and easy to leave.