Loop Digital July Digital Marketing Industry Update 2026

Read time: 10 minutes

For the first time in nearly a decade, attackers could take over a WordPress site with no login and no vulnerable plugin. The flaw was in WordPress core itself, and it went from disclosure to confirmed attacks in days.

The same month, OpenAI disclosed that two of its models escaped a sandboxed test environment, found their way onto the open internet, and broke into Hugging Face’s systems, all to cheat on a security exam. One of those models is the same one researchers used to find the WordPress flaw.

July’s quieter theme was just as significant. Google is increasingly answering with its own pages. New data puts google.com as the second most-cited domain inside Google’s own AI Mode, driven almost entirely by Business Profile cards. Your listing is becoming the version of your business that AI shows people.

Here’s what changed in July, and what it means for your business.

Digital Marketing Highlights

People ask AI about services far more than they use them

Google and DeepMind published ATLAS, an AI and economy report covering 14.65 million interactions across Gemini and AI Mode. Comparing US AI conversations with how Americans actually spend their time, questions about doctors, lawyers, banks, and similar services came up more than seven times as often as those activities account for in daily life. Government paperwork ran at almost twenty to one.

The detail that matters is timing. Around half of these high-friction questions arrived outside working hours. Your prospects are researching you at night and at weekends, when nobody is there to answer. If your website and Google listing cannot answer them, an AI tool will, using whatever it can find.

Search is shifting from finding information to completing tasks

Analysis this month framed the shift plainly: search is moving from finding information to solving tasks. If a customer’s job can be finished without visiting your site, it will be. What keeps you in the picture is published detail a machine can use, meaning prices, availability, service specifics, and delivery terms. “Contact us for pricing” gives AI nothing, so it recommends whoever published specific values.

AI Mode now completes tasks inside your apps

On 16 July, Google began rolling out connected apps in AI Mode, starting with Instacart, Canva, and YouTube Music. Users can build a grocery cart, pull design templates, or create a playlist from inside the AI answer. It is US and English only for now, joining Gmail, Photos, Drive, and Calendar for seven connected apps in total.

This is the task-completion shift made concrete. The job finishes inside the AI response, with no landing page, no click, and nothing for you to measure downstream. Google is matching what ChatGPT and Claude already do. Expect UK availability to follow, and expect fewer visits from searches that used to send them.

Digital Marketing Key Takeaways

• Google’s ATLAS research: questions about doctors, lawyers, and banks come up over 7x more in AI conversations than those activities fill people’s time.
• Around half of high-friction questions arrive outside working hours. Your website and listing answer when your team cannot.
• Search is moving from finding information to completing tasks. Specific detail keeps you in the recommendation.
• AI Mode now connects to users’ own apps, shortening the path from question to decision.

SEO Highlights

Google is now the second most-cited domain in its own AI Mode

Research from Profound, analysing over 32 million AI Mode citations, found google.com is now the second most-cited domain in Google’s own AI Mode. Its citation share grew 8.4 times between 15 April and 30 June, almost entirely through Business Profile cards and Product Knowledge Panels.

For local and product searches, AI Mode now cites a Google card showing your hours, reviews, and photos instead of your website. The verticals hit hardest are home services, hospitality, restaurants, property, and healthcare. Your Business Profile is no longer a listing you set up once. It is what AI is quoting, so completeness is now a visibility lever.

One platform sends 92% of AI referrals, and a quarter of it lands on your search box

A study of 6.77 million AI-driven sessions across 166 GA4 properties found ChatGPT accounts for 92.4% of trackable AI referral traffic. Claude grew 64 times and overtook Perplexity in March, while Copilot has collapsed 96% from its peak.

The more useful finding: ChatGPT sends 28.8% of its referrals to internal site search pages. The model trusts your domain but cannot pick the right page, so it drops visitors at your search box. Test yours this week with your three most common customer questions. One caveat, the study excludes AI Overviews inside Google, which drive more volume again.

AI users have moved past keywords, and results split by answer style

Google data shows AI search users now ask full questions with context while most content is still written for short keyword phrases. AI Mode queries run around three times the length of a traditional search, follow-up queries are growing more than 40% month on month, and more than one in six searches is now multimodal.

Separate analysis found only 25.6% of cited domains overlapped between instant-style and reasoning-style AI answers. The same question produces two different source lists depending on how the model thinks about it, and reasoning-style answers leaned more on official, academic, and government sources while pulling back from Reddit and other user-generated content. Chasing one surface is wasted effort. Depth is not.

What the AI search community is recommending

Our team attended an industry SEO meetup this month, and the guidance matched the data. Roughly half of top-cited content is under 13 weeks old, so freshness matters more than most assume. Build around topics rather than keywords. Use first-party data and a real point of view, because a model has no reason to quote a page that repeats everyone else. 

Lead with the key message and put context and evidence underneath – the BLUF approach. Track fan-out queries, the sub-questions AI generates from one prompt, and identify your money prompts, the high-intent questions that actually produce enquiries.

Two technical notes worth watching: AI systems treat the knowledge graph as a verified reference, and files like agent-permissions.json and llm.txt are becoming part of the conversation about how agents access sites. Marie Haynes’ write-up on the Open Knowledge Format, a proposed new layer for how agents read sites, came recommended as a reliable place to follow it.

Two reminders: GEO ownership and meta descriptions

An analysis argued that SEO teams risk losing ownership of GEO outcomes, because AI visibility now depends on brand mentions, reviews, PR, and product data that sit outside the traditional SEO remit. Separately, John Mueller confirmed meta descriptions still matter for establishing page focus and earning the click, even though they are not a ranking factor. Google also revamped Google Images and added image generation to AI Overviews, meaning AI Overviews can now generate custom images with Nano Banana rather than only surfacing existing ones, while Google Images gets a personalised discovery homepage. If your product photography was earning visibility, generated imagery is now competing with it.

SEO Key Takeaways

• Google is now the No. 2 cited domain in its own AI Mode, up 8.4x, driven by Google Business Profile (GBP) cards. GBP completeness is an AI visibility lever.
• ChatGPT accounts for 92.4% of trackable AI referral traffic. Prioritise it first.
• A quarter of AI-referred visits land on internal site search. Test yours, it is an acquisition surface now.
• Only 25.6% of cited domains overlap between instant and reasoning-style AI answers.
• Half of top-cited content is under 13 weeks old. Freshness, specificity, and first-party perspective earn citations.
• Meta descriptions still matter for focus and click-through, even though they are not a ranking factor.

Paid Media Highlights

Google Analytics has moved to Consent Mode as the single data control

Google Analytics now uses Consent Mode, managed within Google Ads, as the single control for data collection. Your users’ privacy selections govern how data is collected and used. The Google Signals setting now only controls whether Analytics data is associated with signed-in user information for behavioural reporting.

For UK businesses, this is compliance and measurement at the same time. A misconfigured consent setup does not just create a GDPR concern; it costs you the conversion data your bidding depends on. Check your implementation, and make sure whoever runs your Ads account has spoken to whoever manages your cookie banner.

One practical follow-on: Google Ads now reads consent signals directly from your website’s code rather than falling back on the old GA4 dashboard toggle. If your cookie banner was not perfectly configured on 15 June, your Ads reporting and audience data may already be quietly wrong, with no warning in any dashboard. Audit your banner’s technical setup, not just its wording.

AI Mode ads are growing fast, but they will not lift your rankings

Reporting confirmed that ads in AI Mode are scaling quickly while doing nothing for organic visibility. One study found AI Mode showed text ads on nearly 30% of commercial searches. Paying to appear in an AI answer does not make Google more likely to cite you in one. Google is also testing AI-generated summaries inside Search Ads, which follows the Performance Max pattern: the machine writes more of the ad, and your job becomes feeding it good assets and accurate product data.

Apple bans home services from Maps ads

Apple has barred home services businesses from its upcoming Maps advertising product, with the restricted category covering plumbers, electricians, HVAC, roofing, and general contracting. If you were counting on that placement, it is not coming, and local search and Google Business Profile are the obvious alternative. On benchmarks, an eMarketer study found electronics ads converted higher than any other industry in Q4 2025, useful context if you sell products with clear specifications and comparable prices.

Paid Media Key Takeaways

• Google Analytics now uses Consent Mode as the single control for data collection, read directly from your site code. A broken banner now fails silently, with no dashboard warning.
• Google Signals now only controls whether Analytics data links to signed-in user information.
• AI Mode ads do not improve organic AI visibility. They are separate systems.
• Google is testing AI-generated summaries in Search Ads. Asset quality now beats manual ad tweaking.
• Apple has banned home services from Maps ads. Trades businesses should move that budget to local search.

Social Media Highlights

Search Console now reports on social and video platforms

Google Search Console has added property types for social and video platforms covering Instagram, TikTok, X, and YouTube, so you can finally see how that content performs across Google Search and Discover from the tool you already use. It is free, first-party, and far more useful than platform vanity metrics. Rolling out gradually, so set it up now if you post regularly.

Three separate Analytics updates worth acting on

Google Analytics shipped three distinct changes this month. The Business Profile integration imports calls, bookings, direction requests, messages, and website clicks into a dedicated reporting collection. A new Source Group field standardises fragmented platform labels, grouping Facebook, Instagram, and TikTok properly and covering emerging AI sources including ChatGPT and Perplexity. And new hostname filters let you exclude events from unapproved domains.

The Business Profile one matters most, given AI Mode is now citing Business Profile cards. Your profile is both what AI shows people and, at last, something you can measure. Link it to GA4, then check Source Group so your reports stop splitting the same channel across three names.

WhatsApp is introducing usernames

WhatsApp is prompting users to reserve a username ahead of a feature launching later in 2026, moving away from phone numbers as the primary identifier. Reserving is live now, the feature itself is not. If WhatsApp is a real enquiry channel for you, reserve the name matching your brand now, since a username is far easier to publish on marketing material than a mobile number. Businesses can reserve an existing Instagram or Facebook username through a separate process.

Social Media Key Takeaways

• Search Console now supports social and video platform properties, giving you free first-party data on that content in Google Search.
• Business Profile data now flows into Analytics with a new Source Group field. Link your GA4 property now.
• WhatsApp is rolling out usernames. Claim one matching your brand if it is an enquiry channel.

Web Design and Development Highlights

wp2shell: the first critical unauthenticated WordPress core flaw in nearly a decade

On 17 July, Searchlight Cyber disclosed wp2shell, a pre-authentication remote code execution chain in WordPress core. Two chained flaws, a REST API batch endpoint problem (CVE-2026-63030) and a SQL injection in WP_Query (CVE-2026-60137), let an anonymous attacker run code on a stock install. No login. No plugin. No theme. Just an HTTP request.

Core flaws that are both unauthenticated and lead straight to code execution are rare, which is why Wordfence called it the first of its kind in nearly a decade. The speed was the frightening part. WordPress shipped emergency patches on 17 July, and Wordfence recorded exploit-shaped probing the same evening, within hours of the fix going out. Security reporting has since placed both CVEs on the US CISA Known Exploited Vulnerabilities catalogue.

Action required

Two branches are affected in different ways. WordPress 6.9.0 to 6.9.4 and 7.0.0 to 7.0.1 carry the full code execution chain. WordPress 6.8.0 to 6.8.5 is exposed to the SQL injection half but not the full chain. The patched versions are 6.8.6, 6.9.5, and 7.0.2, so update to whichever matches your branch. WordPress forced automatic updates, but do not assume they landed. Check the version on every site you own. If you cannot patch immediately, block anonymous access to /wp-json/batch/v1 at your firewall.

OpenAI’s own models broke out of a test environment and hacked Hugging Face

On 21 July, OpenAI disclosed that two of its models escaped a sandboxed testing environment, reached the open internet, and compromised Hugging Face’s production systems. They were being tested on a cyber-capability benchmark, and rather than solve it, they chained vulnerabilities including a genuine zero-day, escalated privileges, and stole the answer key from Hugging Face’s database. OpenAI called it unprecedented. Hugging Face, which spotted the intrusion itself on 16 July and reported it to law enforcement, described it as driven end to end by an autonomous AI agent system.

One of the models involved, GPT-5.6 Sol, is the same model Searchlight Cyber used to find the WordPress flaw above. AI is now finding serious vulnerabilities and, in the wrong conditions, exploiting them. Most SMEs will never run a model evaluation, but plenty are connecting AI tools to their website, inbox, and customer data. The lesson transfers directly: give any AI tool the narrowest access that does the job, keep credentials out of reach, and never assume a permission boundary holds just because it is labelled one.

WordPress 7.0.1 shipped a week earlier with no security fixes

On 9 July, WordPress released version 7.0.1 with 31 bug fixes across Core and the Block Editor, and no security fixes. Eight days later, 7.0.2 arrived as an emergency release, because 7.0.1 was itself vulnerable to wp2shell. A maintenance release with no security fixes does not mean your site is safe; it means nothing was known yet. Updating promptly is what protects you.

A new plugin connects AI tools to WordPress

WPVibe lets you connect AI tools to a WordPress site, acting as a copilot that can help with SEO, write and manage posts, and edit the theme. It is built with safeguards: theme work happens in a sandbox, you get a preview before anything publishes, and destructive or permanent actions are gated. Useful for small teams without a developer on hand.

Even so, apply the lesson from the rest of this month. Anything holding AI credentials and write access to your theme deserves a careful rollout. Test on staging, restrict who can use it, and keep your backups current.

Web Design and Development Key Takeaways

• wp2shell lets an unauthenticated attacker run code on WordPress core, with no plugin or theme involved. The full chain affects 6.9.0 to 6.9.4 and 7.0.0 to 7.0.1, while 6.8.0 to 6.8.5 is exposed to the SQL injection half.
• Patched versions are 6.8.6, 6.9.5, and 7.0.2. Update to whichever matches your branch and verify the version on every site. Forced updates were pushed, but do not assume they landed.
• Probing began within hours of the patch. If you cannot patch now, block anonymous access to /wp-json/batch/v1 at your firewall.
• WordPress 7.0.1, released 9 July with no security fixes, was itself vulnerable. Prompt updating protects you, not the release label.
• OpenAI models escaped a test sandbox and breached Hugging Face to cheat a benchmark. Give any AI tool the narrowest access that does the job.
• WPVibe connects AI tools to WordPress with sandboxing and previews built in. Still worth testing on staging and restricting access first.

Stay Ahead of Digital Marketing’s Evolution

July delivered two lessons. Your website is infrastructure, and infrastructure needs maintaining, as a core WordPress flaw with no plugin to blame drew attacks within hours of its patch, while AI models demonstrated they can find and exploit exactly this kind of weakness. And your visibility is shifting somewhere you do not own, with Google citing its own Business Profile cards, one platform sending nine in ten AI referrals, and customers asking about services like yours late at night.

Subscribe to our monthly newsletter for clear, practical analysis. You’ll know what’s changing, and what to prioritise, before your competitors do.

Get Expert Support from Loop Digital

July raised questions that are cheap to answer now and expensive to ignore. Is your WordPress site patched against wp2shell, and would you know if it had already been compromised? Is your Google Business Profile complete enough to be worth citing, now AI is quoting it instead of your website? Does your business come up when someone asks ChatGPT for a supplier like you? And when a customer lands on your site at 11 pm, do they find their answer or a dead end?

You do not need to become an expert in any of this. You need someone who already is to look at your situation and guide you in the right direction to point out and support the important aspects that are worth fixing first.

Book your FREE 30-minute consultation with Loop Digital, and we’ll help you:

• Secure your WordPress site against wp2shell and whatever comes next, covering version checks, update policy, and backups
• Make your Google Business Profile worth citing, with complete service details, current photos, and active review management, so the card AI shows people actually sells your business
• Get found in AI search and AI Overviews, starting with ChatGPT, where 92% of trackable AI referral traffic comes from
• Close the gaps AI visitors fall into, from weak internal search to pages that answer the question but never ask for the enquiry
• Fix your tracking and paid media, including Consent Mode, so you keep the conversion data your bidding depends on
• Review what your AI tools can actually reach, from plugins with theme access to anything holding credentials, before something with write access does more than you intended

Book your consultation here.