This week: AI gets the keys to your business profile — and a court bill for its mistakes.

Patch UpdraftPlus now — 3M+ WordPress sites exposed to takeover

A critical authentication-bypass flaw in UpdraftPlus WP Backup & Migration (all versions through 1.26.4) lets unauthenticated attackers forge administrator-level commands, install malicious plugins, and reach remote code execution. This is not theoretical: Wordfence blocked over 8,000 attack attempts in a single 24-hour window. If you run WordPress, update to 1.26.5 or newer today — before reading the rest of this roundup. Search Engine Journal

Gemini can now run your Google Business Profile

Google began a global rollout connecting Google Business Profile to Gemini. Once linked, Gemini can analyze profile performance (impressions, website clicks, direction requests, bookings) and the keywords customers actually search, draft tailored review replies, create and schedule posts, and update hours, menus, photos, attributes, and contact details. For local visibility, the profile is becoming something you converse with rather than a dashboard you remember to log into — which means review response quality and post cadence just lost their best excuse. Search Engine Roundtable

ChatGPT's ad platform adds product feeds

OpenAI's ChatGPT Ads Manager beta now accepts product feed uploads that auto-generate an ad per product — catalog-scale campaign creation, Shopping-style, inside ChatGPT. OpenAI says feed-built ads are among the strongest performers in its beta, citing a DTC brand that doubled CTR and halved CPC after switching. The pattern is familiar: every new ad surface eventually runs on the product feed. The stores that win early are the ones whose feed data is already complete and accurate — the same feed discipline Google Shopping has demanded for years now buys entry to a second platform. Search Engine Roundtable

You don't need AI Max to show ads in AI Overviews

Google Ads Liaison Ginny Marvin clarified a widespread misconception: campaigns using broad match keywords are already eligible for ads in AI Overviews and AI Mode — AI Max isn't required. AI Max extends eligibility by applying broad-match behavior to phrase and exact keywords plus keywordless matching. The catch: ads in AI surfaces are reported lumped in with other top-of-page ads, with no placement-level breakdown yet. So you may already be advertising in AI results without being able to see it. Marvin's repeated emphasis for what to prioritize: first-party data quality — Enhanced Conversions and complete conversion tracking feed everything downstream. Search Engine Land

A German court holds Google liable for what AI Overviews says

Munich's regional civil court granted a preliminary injunction holding Google directly liable for false, defamatory claims generated by AI Overviews about two publishing companies — with fines up to €250,000 per violation. The reasoning matters more than the case: because AI Overviews generates new text rather than linking to others' content, the court ruled Google bears authorial responsibility — the intermediary defense that has shielded search engines for two decades doesn't apply, and an "AI-generated" disclaimer doesn't either. It's preliminary and appealable, but it's the first crack in the wall between "we just index it" and "we said it." If an AI summary misrepresents your business, there is now precedent that someone is accountable. PPC Land

Chrome publishes WebMCP security guidance: AI agents can be hijacked

Two days after opening the WebMCP origin trial in Chrome 149, Chrome's security team published guidance on how agents operating websites can be hijacked: malicious instructions hidden in tool manifests, and contaminated tool outputs — user-generated content like reviews and comments carrying indirect prompt injection. Chrome's blunt assessment is that model-level safety alone can't stop these attacks; defenses must be architectural — token limits on tool responses, cross-origin restrictions, user confirmation before consequential actions, and annotation hints like untrustedContentHint and readOnlyHint. If you're planning to expose WebMCP tools on a store, security design is part of the spec from day one, not a hardening pass later. We've updated our agentic commerce guide accordingly. Search Engine Journal

Schema.org now shows which structured-data types the web actually uses

Schema.org added usage statistics to each schema type — author markup appears on 10M+ domains while event schema sits under 1M, for example. Useful two ways: as a sanity check on which types are widely supported and parsed, and as a reminder that adoption isn't the same as value — the types that matter for a store (Product, Offer, BreadcrumbList) matter because AI agents and rich results consume them, not because they're popular. Search Engine Roundtable

Shopify makes its new Analytics the default for all stores

Shopify's rebuilt Analytics experience — real-time data, custom dashboards, metric/dimension explorations, and ShopifyQL querying — is now the default on every store, replacing the legacy reports interface automatically. If your reporting workflows or saved reports were built on the old interface, verify they survived the switch. Shopify Changelog

The thread running through all of it

Six of these eight stories are the same story: AI surfaces are becoming operational — managing your business profile, building your ads, answering for your brand, operating your site. The inputs they all run on are the ones we keep banging on about: complete feeds, accurate structured data, consistent business information, and a site that's machine-readable on purpose. That's what our GEO program builds, and the free site audit will tell you where you stand.