Technical SEOCovered by 3 sources
- A critical PHP vulnerability called PHP2Shell allows remote code execution and affects roughly 70% of websites.
- Google's John Mueller recommends using a 503 HTTP status code if you must take your site offline to apply security patches.
- Using a 503 status via DNS or CDN is better for SEO than allowing timeouts, 404s, or 500 errors.
- Immediate upgrades to patched PHP versions 8.2.35, 8.3.36, 8.4.27, or 8.5.12 are required to fix the exploit.
If you must disable your site to patch the PHP2Shell exploit, use a 503 status code to signal temporary maintenance and protect your rankings from long-term indexing damage.
Technical SEOCovered by 3 sources
- Google's Gary Illyes clarified that robots.txt only controls crawling permissions, not how data is used for AI training once accessed.
- The standard was designed to manage server load and discovery rather than content usage rights.
- Google recommends using percent-encoding for any non-English characters within robots.txt file paths.
Marketers must use specific AI-blocking tags like Google-Extended instead of standard robots.txt directives if they want to prevent their content from being used in AI models.
Technical SEOCovered by 3 sources
- Google's robots.txt parser follows RFC 9309 and only recognizes specific commands like user-agent, allow, disallow, and sitemap.
- Non-English characters or emojis in rule paths must be percent-encoded to ensure crawlers interpret them correctly.
- User-agent tokens are restricted to letters and dashes, meaning emojis or special characters cannot be used to identify bots.
- Robots.txt is not a security tool and does not prevent access by unauthorized clients or guarantee compliance from all bots.
Incorrectly formatted robots.txt rules or unencoded special characters can lead to search engines accidentally crawling and indexing private site sections.
AI Search
- Google CEO Sundar Pichai describes the future of Search as an 'agentic layer' that performs tasks on behalf of users.
- This shift moves Google from providing information to executing complex, multi-step actions using Gemini AI.
- The goal is to unify Search and AI into a singular, proactive assistant experience.
Marketers should prepare for a shift where Google acts as a concierge, potentially reducing traditional site traffic in favor of direct task completion within the search interface.
Technical SEOCovered by 3 sources
- Google warns that websites undergoing PHP updates should return a 503 Service Unavailable status code.
- The 503 status must be served from outside the PHP environment to ensure it functions while the language is offline.
- Failing to serve a proper status code during extended downtime can result in URLs being dropped from the search index.
Properly configuring 503 status codes during maintenance prevents search engines from indexing error pages or de-indexing your content due to temporary downtime.
Technical SEOCovered by 3 sources
- Google updated its 'Control what you share' documentation to centralize instructions for managing content visibility.
- The update clarifies the use of robots meta tags, X-Robots-Tags, and data-nosnippet attributes.
- It also includes specific guidance on managing content within Google's Search generative AI experiences.
- The changes are largely administrative to ensure site owners have a fresh, consolidated view of available controls.
Marketers should review these consolidated guidelines to ensure their content is correctly opted in or out of specific AI and search features using standard technical tags.
Technical SEO
- A security breach in the UpdraftPlus plugin allowed hackers to install backdoors on millions of WordPress websites.
- Attackers exploited vulnerabilities to gain unauthorized access and potentially control site data.
- The breach affects one of the most popular backup plugins with over 3 million active installations.
Marketers must immediately update UpdraftPlus to the latest version and run a security scan to prevent site hijacking and search engine de-indexing.
Industry News
- High levels of industry chatter and ranking fluctuations suggest an unconfirmed Google search update is currently underway.
- Google Ads introduced a 'Save and test' toggle for Performance Max asset groups to facilitate A/B testing of creative elements.
- Financial Services Verification requirements for Google Ads are expanding to include advertisers in the United States and Canada.
- Documentation for Smart Bidding and URL best practices received updates, including a new seven-day learning period limit for bidding.
Monitor your site traffic closely for unconfirmed ranking shifts and utilize the new Ads A/B testing toggle to data-verify creative changes.
Core Updates
- High levels of industry chatter and ranking volatility were observed between October 20 and 21.
- The fluctuations are currently unconfirmed by Google but suggest a significant ranking update is underway.
- SEO practitioners report erratic traffic patterns in both Search and Discover, alongside shifts in impression data.
- Third-party tracking tools are showing mixed signals, possibly struggling to keep pace with the rapid changes.
Marketers should monitor their Search and Discover traffic closely for volatility as these shifts may be a precursor to an impending official Core Update.
AI Search
- Headless content marketing focuses on delivering raw information through APIs rather than prioritizing a traditional visual web page.
- The strategy aims to make brand data easily accessible to AI scrapers, LLMs, and third-party platforms that synthesize search results.
- This approach shifts the focus from driving website traffic to ensuring brand presence within AI-generated answers and snippets.
Marketers may need to prioritize structured data and API accessibility over traditional page design to remain visible as AI becomes the primary way users consume search information.
Industry News
- Widespread rank tracking outages in September highlighted the fragility of relying solely on keyword position data.
- Traditional rank tracking is becoming less reliable due to AI-generated search results and personalized layouts.
- Experts recommend shifting focus toward brand visibility, AI citations, and direct revenue attribution.
Marketers should diversify their reporting beyond keyword ranks to include business-centric metrics like conversions and brand mentions to survive volatile search environments.
Industry News
- Netflix launched a conversion pixel and expanded its API to track over 20 specific conversion event types.
- Advertisers in the US and Canada can now use this data for first-party attribution, A/B testing, and conversion-lift measurement.
- Starting in November, The Trade Desk users can activate custom and third-party audience segments for Netflix campaigns.
Marketers can now track specific sales outcomes and target niche audiences on Netflix, making streaming ads more measurable and comparable to search or social performance.
Search Features
- Webflow has launched Campaigns, a standalone tool for building landing pages and ads that works even if your main site uses a different CMS.
- The tool uses a brand reference and campaign brief to generate audience-specific page variations and ad copy.
- It features native integrations with Google Ads, HubSpot, Marketo, and Salesforce for lead tracking and performance reporting.
Marketers can now quickly deploy and track high-converting, audience-specific landing pages without migrating their entire website to a new platform.
AI Search
- AI Share of Voice measures how frequently your brand appears in AI-generated answers compared to competitors.
- The metric helps track brand visibility within platforms like ChatGPT, Perplexity, and Google Gemini.
- It provides insights into whether your content is being utilized as a source for Large Language Models.
Understanding your visibility in AI summaries helps you adapt content strategies for modern search behaviors beyond traditional blue links.
AI Search
- Google is testing moving the share icon from the bottom to the top of AI Overviews.
- The share button allows users to send specific AI-generated results to others.
- This change is currently a limited UI test and has not been rolled out to all users.
A more prominent share button could increase the distribution of AI Overviews, potentially shifting traffic away from traditional organic listings.
AI Search
- Mistral released Voxtral 3, an AI voice agent capable of handling phone calls and browser-based conversations.
- The agent can perform tasks like booking appointments and looking up billing information by connecting to business tools.
- The modular architecture allows developers to swap reasoning models and voices while maintaining low latency.
- Pricing starts at $0.04 per minute for the agent service using the Mistral Small model.
Small businesses can now deploy affordable AI voice agents to automate customer service tasks like appointment booking without a human receptionist.