Skip to content
TrustList

TrustList daily digest

Saturday, 24 October 2026

Everything TrustList published on this day, 14 stories, grouped by subject and each in a line of our own.

News8

This group on its own

  1. 1News

    US Treasury widens outbound investment curbs to biotech and four more countries

    The proposed COINS Act rules would ban US investment in Chinese and other adversary-linked AI developers outright, add biotech and hypersonics, and require notice within 30 days. Comments close on 7 December.

  2. 2News

    Vietnam adds ap.vn and on.vn domain fees and widens free biz.vn

    Circular 149/2026/TT-BTC takes effect on 23 November. From 2027, any Vietnamese business without a .vn domain, not only those under a year old, can get one biz.vn name free for three years.

  3. 3Business news

    FPT opens its first African office in Cairo as an EMEA nearshore hub

    The Vietnamese IT services group starts with more than 60 Egyptian engineers already serving Gulf clients, plans about 200 staff within two years, and names France as its first European market from Cairo.

  4. 4HR News

    Turkey's data regulator limits how employers read staff work email

    Principle decision 2026/2035 says a general warning that mailboxes may be checked is not enough, consent is rarely a valid basis, and reading content needs a concrete suspicion. Breaches fall under the KVKK fines regime.

  5. 5HR News

    Dayforce agrees to buy Ribbon, a Toronto AI job interviewer

    Ribbon, founded in 2022, says its voice AI has run more than a million screening interviews. Dayforce, taken private by Thoma Bravo this year, will build it into a new agentic recruiting product. No price was given.

  6. 6Business news

    Fintel buys Mortgage Brain outright for £38.4m

    The adviser services group took a 5.8% stake in March 2024 and now owns the mortgage sourcing and submissions provider. Its chief executive, Zahid Bilgrami, will run Fintel's whole Software & Data division.

  7. 7News

    Teams meeting notes move to the organizer's OneDrive from mid-November

    Loop and Facilitator notes from non-channel meetings will be owned by whoever set up the meeting, not whoever pressed the button. Existing notes stay put, so two storage rules will run side by side.

  8. 8News

    Colombia's CRC says Claro's remedies for the Azteca fibre deal fall short

    On 778 of the 874 routes of the network more than 250 operators rely on, Comcel would be the only fibre provider. The regulator wants verifiable wholesale terms, independent audits and no automatic expiry.

Tech and security5

This group on its own

  1. 1Security advisories

    Brotli fixes a critical decoder flaw that reaches far beyond Node.js

    CVE-2026-111497 is rated 9.2 by Google and hits every Brotli release from 1.0.3 to 1.2.0. Envoy, the PyPI packages and Debian have shipped fixes; Ubuntu still ranks it medium.

  2. 2Security advisories

    OpenJDK October update fixes 46 CVEs; Corretto builds are out

    The quarterly advisory covers Java 8 to 27, with a top score of 7.0, and a separate notice adds the 9.1-rated TLS flaw CVE-2026-91403. Amazon Corretto shipped 27.0.1, 25.0.5, 21.0.13, 17.0.21, 11.0.33 and 8u512.

  3. 3Security advisories

    Pillow 13.0.0 closes 39 more flaws, two of them rated critical

    Besides the bundled OpenJPEG overflow, the Python imaging library published 39 more advisories fixed in 13.0.0, including code execution from one crafted FlashPix file. One Arrow memory leak is still unfixed.

  4. 4Security advisories

    Unbound 1.26.2 fixes a DNS-over-QUIC crash and two DNSSEC bypasses

    NLnet Labs fixed five CVEs in its recursive resolver five weeks after the September release that patched a critical one, so servers still on 1.26.1 are behind again. Debian shipped DSA-6581-1.

  5. 5Security advisories

    AWS will not fix two flaws in its retired Multi Model Server

    CVE-2026-115812 and CVE-2026-115813 affect every MMS release up to 1.1.11, and the management API that exposes them has no authentication. AWS advises moving to a supported model server.

Funding and deals1

This group on its own

  1. 1Funding news

    Higgsfield adds TCV and NVIDIA to its Series B for AI video

    The San Francisco company with roots in Kazakhstan does not say how much the extension adds to its DST-led August round. It reports $1 billion in annualised revenue, reached 18 months after launch.

TrustList Weekly

The week in software and IT, in one email

The news that matters to buyers, new rankings and our own research. Every Thursday, free, and easy to leave.

We will email you to confirm. Unsubscribe with one click in any issue. Privacy policy

TrustList daily digest, Saturday, 24 October 2026 - TrustList