WebsitesOfficial01
WordPress 7.1.1: 11 security fixes and an immediate update recommendation
WordPress released version 7.1.1, a maintenance and security release containing 17 Core bug fixes, 19 Block Editor fixes and 11 security fixes. WordPress explicitly recommends updating sites immediately. The addressed issues include stored XSS, path traversal in the REST Templates Controller, authorization and disclosure problems, Contributor+ post overwrite and other vulnerabilities. Security fixes are also being backported to eligible older branches, although WordPress reiterates that only the latest release is actively supported. For a managed WordPress portfolio, this is not an update to leave until the next routine maintenance window. Immediate does not mean blind deployment, however: Elementor, custom child themes, caching, forms and proprietary plugins should receive a quick post-update validation.
Business impactVirtually every managed WordPress property should have its version checked today. The release also provides a concrete demonstration of the value of managed maintenance and proactive security for clients.
WordPress News ↗
Do this nextInventory production WordPress sites, record current versions, take backups, update to 7.1.1 and run a smoke test covering the homepage, mobile navigation, Elementor layouts, forms, CTAs, caching and critical service pages. Give extra attention to sites using custom plugins.
Google AdsOfficial02
Google's lead-gen message today: Smart Bidding needs closed-won revenue signals
Google Ads published a dedicated update today on data strength for lead-generation campaigns. The central idea matters more than another bidding setting: Google AI should receive information about which leads actually become valuable customers, not merely the initial form submission. Google highlights expanded Data Manager workflows, a new lead intent scoring pilot and journey-aware bidding for delayed sales cycles. This is especially relevant to local services, where the same form_submit event can represent a genuine customer, spam, an unsupported service area or someone who never books. When Smart Bidding sees only form volume, that is what it can optimize. Feeding qualified and closed-won outcomes creates the possibility of optimization closer to actual revenue.
Business impactFor Appliance Trust, roofing, railings and other lead-generation clients, measurement architecture becomes part of advertising strategy. The gap between Google Ads and the actual outcome of a call or form is now a commercial issue rather than merely an analytics issue.
Google Ads & Commerce ↗
Do this nextFor one active client, map Ad Click → Call/Form → Qualified Lead → Booking → Completed Job → Revenue. Identify the final stage currently visible to Google Ads. If measurement stops at form_submit or phone_click, that is the primary gap to solve.
Lead GenerationOfficial03
ChatGPT Ads readiness: OAI-AdsBot becomes a technical landing-page requirement
OpenAI updated its technical guidance for ChatGPT Ads advertisers. Landing pages must be accessible to OAI-AdsBot, which is used to validate page safety and may use landing-page content to determine when an ad is relevant. OpenAI also recommends allowing OAI-SearchBot. Advertisers need to check more than robots.txt: CDN rules, WAFs, bot protection, authentication, JavaScript challenges, CAPTCHAs, geographic restrictions and rate limiting can all interfere with validation. OpenAI specifically notes that OAI-AdsBot is verified and allowlisted by Cloudflare. This creates a new technical checklist for advertising landing pages. A site can work perfectly for human visitors and Googlebot while still being unsuitable for ChatGPT Ads because of firewall or bot-management policies.
Business impactAI advertising readiness becomes a distinct part of website QA. For an agency, this naturally extends Technical SEO and Ads preparation: checking Google accessibility alone is no longer sufficient.
OpenAI Help Center ↗
Do this nextAdd OAI-AdsBot and OAI-SearchBot accessibility to the standard launch checklist. On one production site, review robots.txt, Cloudflare or WAF events and crawler HTTP access, paying particular attention to CAPTCHAs, aggressive bot protection and geographic restrictions.
Business OpportunityOfficial04
Sponsored Agents change the ad model: the advertisement can become a conversation
OpenAI is testing Sponsored Agents with select advertisers in the United States. After interacting with a ChatGPT ad, a user can enter a separate, clearly labeled conversation with a business-sponsored AI agent, ask follow-up questions and then follow a link to the advertiser's website. Ads Manager is simultaneously gaining AI creative tools, natural-language campaign management and contextual text customization, including automatic adaptation and translation of ad copy. OpenAI has also launched initial integrations with HubSpot and Shopify. Toronto local-service businesses should not treat Sponsored Agents as a broadly available acquisition channel yet because testing is limited. The direction is nevertheless clear enough to prepare for: the advertising landing experience is evolving from a single page into a knowledge system capable of explaining services, geography, limitations, timing, warranties and the next conversion action.
Business impactA well-structured service-business website gains another function: it becomes a knowledge foundation for conversational advertising, connecting web architecture, content, structured information, CRM and paid acquisition.
OpenAI ↗
Do this nextCreate an Agent Readiness template covering services, service areas, hours, pricing logic, warranty, emergency availability, qualification questions, exclusions, FAQs, trust evidence and Call, Book or Quote actions. Compare it with what an AI can currently extract from a client's website.
Local SEOOfficial05
Google expands dedicated Search units to local-business queries
Google updated its Aggregator and Supplier unit documentation to support local-business queries. These particular features apply to users in the European Economic Area, so this is not a change to Toronto's Local Pack and it is not a new Canadian ranking factor. Strategically, however, the change is notable. The supplier unit explicitly supports direct providers including brick-and-mortar businesses and service providers such as plumbers, and Google says direct suppliers can be eligible using information available through ordinary web crawling without necessarily supplying a separate feed. Google's documentation also emphasizes rich entity details, precise categories and descriptions, ratings and reviews, imagery, operating hours and current information. Google continues to turn local entity information into a structured layer that can feed multiple Search experiences rather than only the traditional Maps interface.
Business impactThere is no immediate GTA implementation required because of this EEA feature. The direction does reinforce entity completeness: websites, GBP, categories, reviews, imagery, service information and business facts should consistently describe the same entity.
Google Search Central ↗
Do this nextDo not modify Canadian sites specifically for the EEA units. Instead, use the update as a reason to audit one client's entity consistency across website, GBP, schema, service areas, hours, reviews and third-party listings.
AI SearchIndependent Test06
200,000 local AI searches confirm that strong Maps visibility does not guarantee AI visibility
New BrightLocal research analyzes more than 200,000 non-branded localized searches across 1,342 business locations and roughly 1.9 million AI citations. The study covered ChatGPT, Google AI Mode and AI Overviews. Google Maps mentioned the tracked business in about 66% of searches, compared with roughly 32–38% across AI surfaces. The role of the company's own website is particularly notable: 93% of unique domains used by AI as sources were business websites, accounting for 42% of all citations. Results also changed when the same prompt was repeated and when location shifted within the same city. This is independent research rather than an official description of ranking systems, but the sample is large enough to support a practical conclusion: local AI visibility cannot be reliably measured with a single check or inferred from Maps ranking.
Business impactThe future local SEO dashboard should measure Maps visibility and AI recommendation visibility separately. This aligns directly with the standalone analytics and Client Visibility product direction.
BrightLocal ↗
Do this nextBuild a baseline for one client using 10 non-branded service + location prompts, at least three repetitions and multiple location variants. Store brand mentions, cited URLs and competitors separately. Repeat weekly rather than drawing conclusions from one daily prompt.
Google SearchObservation07
Google rankings remain unusually volatile, but no update has been confirmed
Search Engine Roundtable continues to report elevated Google Search volatility today following a significant spike around September 15. SEO tracking tools and industry discussion indicate substantial movement, but Google has not confirmed a new core or other ranking update. Google's Search Status Dashboard also shows no current incidents for Crawling, Indexing, Ranking or Serving this morning. Ranking movement therefore should not automatically be attributed to a new algorithm, and broad page changes should not be made solely because of a few unstable days. For sites that recently changed architecture, service pages or internal linking, it is particularly important to distinguish site-specific effects from broader SERP movement.
Business impactToday is better suited to establishing a baseline than reacting. A sharp decline in one keyword without corresponding declines in impressions, leads and related query clusters may simply reflect short-term volatility.
Search Engine Roundtable ↗
Do this nextReview Search Console over the last 7 and 28 days for priority clients. Look at clusters rather than isolated rankings: clicks, impressions, average position, landing pages and lead activity. Begin diagnosis only if a systematic decline persists after SERP movement stabilizes.