Weekly industry briefing: 25 October 2026
The Turkey-Azerbaijan e-TIR pilot, rising air cargo rates, the FortiMail and PHP2Shell flaws, GİB e-invoice guide updates and the end of paper invoices in 2027. 14 stories in four sections.
Each week we round up news from freight forwarding, customs, air cargo, cybersecurity and e-transformation, with a source for every story. This first issue has 14 stories in four sections. The first e-TIR pilot between Turkey and Azerbaijan starts at Dilucu-Sederek before the year is out. Air cargo rates are climbing again. CISA has added the FortiMail and Windows Shell flaws to its catalog of exploited vulnerabilities, while reports on PHP2Shell exploitation contradict each other. GİB (Turkish Revenue Administration) has also updated its e-invoice and e-archive guides. Figures and dates come from the cited sources, so check the primary source before any critical decision.
Customs and foreign trade
e-TIR: first Turkey-Azerbaijan pilot to start before year end
Customs heads of the Organization of Turkic States (OTS) met in Bishkek on 12 October 2026. Deputy Trade Minister Sezai Ucarmak said the first e-TIR pilot with Azerbaijan will start at the Dilucu-Sederek border crossing before the end of 2026. Member states are also drafting a new Customs Cooperation Action Plan for 2027-2031. Once transit declarations go electronic, the TIR and transit modules in forwarder software will need to handle digital data exchange.
Full article: https://boransoftware.com/en/blog/e-tir-turkiye-azerbaycan-pilotu-dilucu-sederek/
Source: https://www.alomaliye.com/2026/10/13/tdtde-gumruk-isbirligi-ve-e-tir-gundemi/amp/
ICS2 and the EU customs reform
According to SGS, the EU ended the temporary derogations linking NCTS Phase 6 and ICS2 on 1 June 2026. Every consignment entering the EU customs territory now needs a valid ENS (Entry Summary Declaration), filed through ICS2 or in a combined transit declaration. Air Cargo Week looks further ahead, at a plan to bring customs data together under an EU Customs Data Hub and a separate EU Customs Authority. The source gives no dates for it.
Source: https://ecustoms.sgs.com/?p=16238 , https://aircargoweek.com/2026-customs-shake-up/
Istanbul Regional Directorate publishes annual A-type bonded warehouse tariffs
The Ministry of Trade's Istanbul Regional Directorate lists the annual price tariffs of A-type bonded warehouses in the region on a single page dated 13 October 2026. Warehouses are grouped by customs directorate, and most entries link to a tariff PDF. Some have no tariff at all.
Source: https://istanbulbolge.ticaret.gov.tr/uygulamalar/antrepo-yillik-fiyat-tarifeleri
New routes in Gulf logistics after Hormuz
Ticaret Gazetesi reported on 9 October 2026 that risks around the Strait of Hormuz are pushing Gulf trade toward alternative ports and sea-road links. The article names Khor Fakkan and Fujairah in the United Arab Emirates, Sohar and Salalah in Oman, and Jeddah in Saudi Arabia. An expert quoted in the piece points out that an open port cannot necessarily serve every country or every type of cargo, so costs should be compared across the whole door-to-door chain.
Source: https://ticaretgazetesi.com.tr/2026/10/09/hurmuz-bogazi-sonrasi-korfez-lojistiginde-yeni-rotalar/
Air cargo and logistics
Air cargo rates rise again; Cathay Cargo tops 150,000 tonnes in September
Air Cargo News reported on 22 October 2026 that, according to TAC Index data, the Baltic Air Freight Index rose 4.7% week on week and 26.4% year on year in the week of 19 October. As of 16 October, jet fuel cost 113.7% more than a year earlier. In a separate story, the same publication said Cathay Cargo carried more than 150,000 tonnes in September, up 14.2% on September last year.
Source: https://www.aircargonews.net/data/2026/10/tac-reports-another-surge-in-airfreight-rates/ , https://www.aircargonews.net/airlines/2026/10/cathay-cargo-sees-volumes-boom-in-september/
Qatar Airways Cargo adds freighter links for the winter schedule
Qatar Airways Cargo is adding freighter connections to Denmark, the US and Poland, Air Cargo News reported on 22 October 2026. A weekly Doha-Budapest-Copenhagen-Doha rotation starts on 25 October. Doha-Warsaw-Chicago-Brussels-Doha follows on 26 October, and Doha-Liège-New York JFK-Atlanta on 1 November. All flights use Boeing 777 freighters.
Why logistics costs stay high when freight rates fall
A 15 October 2026 article in Ticaret Gazetesi cites the WTO forecast of 8 October 2026: world merchandise trade volume will grow 3.9% in 2026 and 4.1% in 2027. Even when freight rates drop, the article says, terminal handling, trucking, storage, customs, insurance and waiting charges can keep the total bill high. Quotes should therefore be compared on the same scope, with free time and surcharges included.
Full article: https://boransoftware.com/en/blog/navlun-lojistik-maliyeti-toplam-maliyet/
IATA air cargo data for August 2026
Figures IATA released on 29 September 2026 show total demand (CTKs) up 4.4% year on year in August and international demand up 5.3%. Capacity fell 0.1%, and the load factor rose 2.0 points to 46.0%. Jet fuel was 79.2% more expensive than a year earlier. North America posted the fastest demand growth, at 6.6%.
Source: https://www.iata.org/en/pressroom/2026-releases/09-29-air-cargo-demand-grows-august
Cybersecurity
Unauthenticated file write flaw in FortiMail (CVE-2026-104286)
Fortinet published an advisory for CVE-2026-104286 on 1 October 2026. Rated CVSS 9.8, the flaw lets an unauthenticated attacker write files to the system with crafted HTTP/HTTPS requests. CISA added it to its Known Exploited Vulnerabilities (KEV) catalog the same day. At the time of the report, versions 8.0.2, 7.6.7 and 7.4.9 had not yet shipped. The suggested workaround is to disable IBE support and restrict the management interface to trusted networks. If you run FortiMail, check the current patch status in Fortinet's advisory.
Full article: https://boransoftware.com/en/blog/fortimail-zero-day-cve-2026-104286/
Source: https://www.helpnetsecurity.com/2026/10/02/fortinet-fortimail-vulnerability-cve-2026-104286/ , https://thehackernews.com/2026/10/critical-fortimail-zero-day-flaw.html
October 2026 Patch Tuesday: actively exploited Windows Shell flaw
Microsoft patched CVE-2026-96951 in its 13 October 2026 update. The security feature bypass, caused by command injection in Windows Shell, is rated CVSS 8.8 and can get around Mark of the Web protections. Exploitation requires the user to open a crafted file or click a link. Microsoft confirmed active exploitation, and CISA added the flaw to KEV on 13 October with a 16 October deadline for federal agencies. Sources disagree on the total number of fixes, so we leave that figure out. Roll out client updates quickly and remind users to be careful with email attachments and downloads.
Source: https://securityaffairs.com/?p=200965 , https://www.lansweeper.com/blog/patch-tuesday/microsoft-patch-tuesday-October-2026/
PHP2Shell update: exploitation reports differ by source
On 21 October 2026, PHP released versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35 to fix CVE-2026-109618 and CVE-2026-109619. Sources disagree on exploitation. Tenable says Amazon saw an exploitation attempt on 17 October and describes the flaw as widely exploited. CISA's 21 October alert said it had observed no exploitation at the time of publication, and Huntress wrote that it had seen none among its partners. Upgrade PHP-based sites to a fixed version without waiting for the picture to clear.
Our earlier article covers the flaws, affected versions and what to do: https://boransoftware.com/en/blog/php2shell-php-guvenlik-acigi-cve-2026-109618/
Source: https://www.tenable.com/blog/php2shell-cve-2026-109618-cve-2026-109619-frequently-asked-questions-about-critical-php-remote , https://www.huntress.com/blog/php2shell-leaked-critical-php-vulnerabilities
e-Transformation and digital signage
GİB updates e-invoice and e-archive guides and the UBL-TR code list
In an announcement dated 27.07.2026, GİB updated the e-Invoice package, the e-Archive Invoice package and the UBL-TR code list guide; the changes went live on 14.09.2026. According to a summary by Vergi Teknolojileri, a new exemption code, 233, was added, codes 308 and 339 were restricted to the investment incentive scenario, and return (İADE) invoices can now also be used in the public sector (KAMU) scenario. The code details come from this secondary source, so integrators should download the packages from GİB and verify them. Integration software should have carried the updated schema and code list from 14.09.2026.
Source: https://ebelge.gib.gov.tr/duyurular.html , https://vergiteknolojileri.com.tr/gib-e-fatura-ve-e-arsiv-fatura-kilavuzlari-guncellendi-2026-14-eylulde-devreye-girecek-degisiklikler
Paper invoice threshold for simplified-method and business-account taxpayers
Under VUK (Tax Procedure Law) General Communiqué No. 589, taxpayers on the simplified method and those keeping books on a business-account basis may issue invoices of up to 3,000 TL on paper until 31.12.2026. From 1.1.2027, every invoice, whatever the amount, must be issued as an e-Archive invoice through the GİB portal. We took this from an accounting website summarising a TÜRMOB (Union of Chambers of Certified Public Accountants of Turkey) announcement; check the communiqué for the exact wording. Small businesses will need to prepare for the e-Archive portal or an integration ahead of the 2027 switch.
Full article: https://boransoftware.com/en/blog/kagit-fatura-2027-basit-usul-e-arsiv-zorunlulugu/
Source: https://www.muhasebetr.com/guncelmevzuat/mevzuat_oku.php?mevzuat_id=7116
Digital signage trends for 2026
Kitcast's article, published on 10 June 2026 and updated on 19 August, lists the 2026 trends as AI-generated content, large-scale LED installations, vertical short-form content, programmatic DOOH and context-aware advertising. Citing Grand View Research, it puts the global digital signage market at about 31 billion dollars in 2025 and about 58 billion dollars in 2033 (8.2% CAGR).
Source: https://kitcast.tv/blog/new-digital-signage-trends
Where our software fits
Some of these stories fall within the scope of our products:
- ECELA: TIR and transit modules, EU pre-arrival data, bonded warehouse records and total cost tracking https://boransoftware.com/en/urunler/ecela/
- carGObis: AWB, capacity booking and rate tracking for air cargo agents https://boransoftware.com/en/urunler/cargobis/
- AerOS: screen management for vertical and context-aware content https://boransoftware.com/en/urunler/aeros-signage/