Loop Digital June Digital Marketing Industry Update 2026

Read time: 12 minutes

June was the month regulators started forcing Google’s hand. The UK’s CMA ordered Google to explain how it ranks search results and give businesses advance notice of major changes. A new US state law gave small businesses the legal right to demand an explanation if they’re removed from search. 

A Pew Research study found 60% of US adults now read AI summaries in search results. New data confirmed that Claude pulls its answers directly from Brave Search’s top results, not its own index. 

OpenAI also moved ChatGPT advertising from limited testing toward a broader launch, potentially the first genuinely new demand-capture advertising channel since Google launched pay-per-click search ads almost two decades ago.

There were also two urgent security stories: a critical, unauthenticated flaw in the Avada Builder plugin, and Wordfence Q1 data showing common and dangerous WordPress vulnerabilities nearly doubled in a single quarter. 

Here’s what changed in June, and what it means for your business.

Digital Marketing Highlights

The UK CMA orders Google to explain how it ranks search results

The UK’s Competition and Markets Authority has ordered Google to improve transparency and fairness in how it ranks search results, with a six-month deadline to comply. Google must give businesses a clear route to raise ranking concerns, rank organic results, including inside AI Overviews, using objective and non-discriminatory criteria, and give advance notice before significant changes. UK businesses told the CMA that ranking drops arrived without warning and without any way to appeal. Google has also been ordered to allow site owners to opt out of AI Overviews, and to let users port their search data to approved third parties within three months.

Google will almost certainly challenge these orders. But the direction of travel matters: businesses now have regulatory weight behind the expectation of an explanation when their visibility changes. Keep documenting your ranking movements, and make sure your Google Search Console is set up and receiving notifications.

A new US law gives small businesses the right to demand ranking explanations

Tennessee SB 2262, a new US state law effective 1 July 2026, gives small businesses the legal right to contact a search engine and demand an explanation if they are de-indexed or lose 25% or more of their reviews. The engine must respond within five business days with a full explanation and details of any appeal process. Google has already published guidance telling Tennessee businesses to verify their site in Search Console, which becomes the notification channel for spam removals, legal takedowns, and security issues.

It’s a US state law, not UK legislation, but it fits a clear global pattern. Regulators are deciding that businesses deserve explanations when Google changes how it treats them. If you haven’t verified your site in Search Console and enabled all notifications, do it this week. It costs nothing and means you’re the first to know.

Apple ships a new AI answer surface to every device

At WWDC, Apple introduced Siri AI, a rebuilt assistant, custom-built with Google’s Gemini models, that can pull live information from the web and generate answers on almost any topic. It sits inside Spotlight on iPad and Mac, the same box people already use for quick queries. It arrives as a beta later this year, English first, and won’t initially be available in the EU or China.

Apple has published no Search Console equivalent, no citation report, and no referrer data. A site could be answering Siri questions every day with no way to measure it. There is no Siri optimisation playbook yet. The honest move is the same one that keeps paying off everywhere else: accurate, well-structured content that a machine can read and cite.

Most people now read AI summaries, and AI search use keeps growing

A new Pew Research study found that 60% of US adults have read AI-generated summaries at the top of search results, and around 40% now use chatbots like ChatGPT, Gemini, and Copilot to find information. ChatGPT leads by a wide margin, used by 44% of US adults. Separate research shows AI search use is rising even as trust dips slightly; people use it for convenience while staying somewhat sceptical. That trust gap is your opening: accuracy and clear expertise are what convert a sceptical AI user into a confident one.

AI tool availability is more fragile than it looks

On the tools side, new all-in-one AI subscription services are emerging, like Abacus.ai, which bundles multiple AI models into a single interface. A US export-control order also briefly pulled Anthropic’s newest models offline this month. Both are reminders that the AI landscape changes fast. Don’t build your marketing workflows on a single platform you can’t easily replace.

Google Business Profile now feeds directly into GA4.

For the first time, you can see how your Business Profile is actually performing, not just website clicks, but calls and direction requests, alongside your web analytics in one view. Link your GA4 property to your Business Profile now. Keep the profile accurate: name, address, phone, hours, and posts feed directly into local search and AI answers.

Google’s background AI agents now monitor topics for Ultra subscribers

Google has rolled out AI information agents to Ultra subscribers that quietly monitor chosen topics and ping users with updates and links when something new appears. People are increasingly being brought information rather than going to search for it.

Fresh, genuinely new content now has a route to reach people watching a topic without requiring them to search. Publishing for accuracy and currency matters more than it did.

Google Business Profile comes to Gemini, and now feeds directly into Analytics

Two related updates for local businesses this month. Google is adding Business Profile management tools to the Gemini app, so owners can manage their local presence through a conversational assistant. Separately, Google Analytics now has a native integration with Google Business Profile, rolling out from June 2026, pulling calls, direction requests, bookings, and website clicks into GA reports without needing UTM parameters.

Digital Marketing Key Takeaways

• The UK CMA has ordered Google to explain its rankings, give advance notice of major changes, and allow an AI Overviews opt-out, a real shift towards transparency for smaller businesses.
• Tennessee’s new law gives small businesses the right to demand a de-indexing explanation within 5 days. Verify your site in Search Console and enable all notifications.
• Apple’s Siri AI puts a new answer surface inside Spotlight on every device, with no citation or analytics reporting for sites.
• 60% of US adults now read AI summaries, and 40% search via chatbots. Your information needs to be accurate and consistent wherever AI picks it up.
• AI tool availability changes fast. Don’t build your marketing stack around a single platform you can’t replace.
• GA4 now integrates directly with Google Business Profile. Link them now to see calls, direction requests, and bookings alongside your web data.
• Google’s background AI agents bring new content to Ultra subscribers without a search. Publish for accuracy and currency.

SEO Highlights

Two-thirds of US searches now end without a click

New SparkToro research found that 68% of US Google searches ended without a click in the first four months of 2026, up 7.56 points in two years. AI Overviews now appear on more than 20% of searches, and where they do, click-through drops by nearly 60%. The data is US-only, and informational queries are hit hardest, but the pattern is consistent.

The lesson is not that SEO is dead. Branded, local, and high-intent transactional searches still drive strong clicks. The shift is that visibility no longer equals a visit. Track your commercial and local queries closely, and treat informational content as a brand and citation asset rather than a traffic driver.

Google calls LLMs.txt a fundamental flaw, and it’s also in Chrome Lighthouse

Google’s John Mueller explained why LLMs.txt files are fundamentally untrustworthy: the file is just a site owner declaring what their own site is about, which makes it impossible for AI systems to use it to distinguish good content from bad, the same reason the old meta keywords tag was abandoned. Google also confirmed LLMs.txt files won’t harm or help Search rankings. Ahrefs data backed it up: 97% of published LLMs.txt files received zero requests in May, and only 28% of domains had published one at all.

LLMs.txt won’t help your rankings, and the Lighthouse check isn’t what you think

The earlier confusion came partly from Google adding an LLMs.txt check to Chrome Lighthouse, but that is specifically for agentic browsing, where an AI agent is already on your site, not for discovery or rankings. For most businesses, creating an LLMs.txt file is an effort with no payoff. Put that time into content quality and technical foundations.

May 2026 core update: check whether it affected you

The May 2026 core update launched on 21 May and was still rolling into early June. If you saw ranking volatility in late May or the first week of June, this update is the likely cause.

Don’t react to short-term movement. Wait until the rollout is complete, then compare a full week after against the week before it started. If you see a sustained drop, focus on page-level content quality and relevance, not on quick technical fixes.

Google’s new guidance: its rules now cover AEO and GEO too

On 5 June, Google published guidance that formally asserts its own documentation as the authoritative source for SEO, AEO, and GEO advice. The key points: third-party SEO tools don’t have access to Google’s internal ranking data and cannot guarantee performance; tools that claim to be “approved by Google” are misrepresenting themselves; AEO and GEO are still SEO, not separate disciplines, and any AI optimisation service not aligned with Google’s own published guidance should be treated with scepticism.

Use Search Console as your primary data source; it’s the first-party tool Google specifically recommends.

If you want to appear in Claude, rank well in Brave Search

New data suggests that Claude doesn’t independently re-rank results; it pulls Brave Search’s top 10 directly. If a page doesn’t rank in Brave for a given query, it is unlikely to feature in Claude’s answer. As noted in the April update, ChatGPT recommendations are similarly shaped by Bing. Different AI systems use different underlying indices.

AI visibility is no longer a single-channel strategy. Set up Bing Webmaster Tools if you haven’t already; it’s free, quick, and directly feeds Bing and ChatGPT. Then check how your key pages rank in Brave for your most important queries. The fundamentals of good SEO still apply; the index you’re building them on now matters more than it did.

Robots.txt blocks crawling, not indexing

Mueller clarified a common panic this month: a WooCommerce site found 51,000 URLs flagged in Search Console as “Indexed, though blocked by robots.txt.” The explanation is straightforward: robots.txt stops Google from crawling a page, but if other pages link to it, Google can still discover and index the URL. It just won’t show a snippet, and these URLs rarely surface in real results.

Not every Search Console warning needs a fix. If you genuinely need a page kept out of Google, use a noindex tag on a crawlable page; robots.txt alone won’t do it. For low-value parameter URLs like add-to-cart links, blocking crawling is usually enough.

Building for AI search: brand mentions, follow-up answers, and complete content

Three connected ideas reinforced each other this month. AI search anticipates follow-up queries, breaking one question into several smaller ones, so content that covers the obvious answer and its natural follow-ups in a single piece gets surfaced more often. An SEO panel concluded that brand mentions are becoming the new backlink in AI search; consistent, accurate mentions across the web are a citation signal in their own right. And Google confirmed hyphenated domain names carry no SEO penalty.

Build one complete, authoritative answer per topic rather than thin pages for every keyword variation. Make sure your brand is talked about accurately in the right places; it is now a direct route to AI citation.

AI referrals are growing, and the visitors they send are more engaged

Adobe data on travel sites found AI referrals up 194% year-on-year, with AI-referred visitors spending 70% longer on site, engaging 21% more, and bouncing 41% less than other traffic. The conversion gap with traditional search keeps narrowing. Separately, Google still sends around 23% of its queries to the open web, meaningful volume, just no longer the majority it once was.

SEO Key Takeaways

• 68% of US searches now end without a click, up 7.56 points in two years. Visibility no longer guarantees a visit.
• LLMs.txt files don’t help search rankings. The Chrome Lighthouse check is for agentic browsing only, not discovery.
• If you saw ranking volatility in late May or early June, the May core update is the likely cause. Wait for full completion before drawing conclusions.
• Google’s new guidance formally extends its authority to AEO and GEO. Third-party tools can’t access internal ranking data and can’t guarantee results.
• Claude pulls Brave Search’s top 10 directly. Bing Webmaster Tools covers ChatGPT. AI visibility now spans multiple indexes.
• Robots.txt blocks crawling, not indexing. Use noindex on a crawlable page if you genuinely need something kept out of Google.
• Build complete answers per topic, grow consistent brand mentions, and judge AI traffic on quality rather than volume.

Paid Media Highlights

Meta introduces a location-based fee for ads

Meta has confirmed a location-based fee that applies to ads in certain markets, a regional charge layered onto ad costs depending on where campaigns run. For UK advertisers, the practical point is to check whether your campaigns are affected and factor any added cost into your budgeting and reporting before it appears as an unexplained discrepancy.

Audit your Meta ad costs now. If the fee applies to your target locations, fold it into your cost-per-result targets so your reporting stays accurate and your budgets hold.

Google begins testing healthcare ads inside AI Mode

Google has confirmed a small test of healthcare-related ads within AI Mode, limited to US English-language queries. Eligible campaign types include Performance Max, AI Max with search term matching, Shopping, and broad match. The initial iteration excludes pinned assets and text disclaimers, a compliance consideration for regulated advertisers whose creatives typically rely on them.

If you advertise in a regulated sector, watch this closely. AI Mode placements will come with their own creative and compliance requirements. For everyone else, it confirms the direction: ads are moving into conversational AI surfaces, and the formats will look different.

OpenAI moves ChatGPT advertising from testing to launch

OpenAI has moved ChatGPT advertising from limited testing to a partial launch, with placements clearly labelled as sponsored. The significance is structural. ChatGPT could become the first genuinely new demand-capture advertising channel since Google launched pay-per-click search ads almost two decades ago: a platform that meets buyers at the point of expressed intent, with more personal context about the user than any comparable tool.

The challenge is that most ChatGPT queries are still informational, and attribution is currently broken. Users research in ChatGPT, then complete purchases on Amazon, Google, or brand sites directly. UK advertisers cannot access ChatGPT placements yet, and the channel has not proven performance at scale. AI platforms are becoming advertising surfaces, and the existing ad market will redistribute rather than grow. Start aligning your team on measurement and attribution now, before the channel is live and the gaps become expensive.

Preferred Sources now influence what appears in AI Overviews and AI Mode

Google’s Preferred Sources feature now feeds into what users see in AI Overviews and AI Mode, letting people signal the publishers they trust most. Being a source someone actively chooses to follow now has a direct effect on how often that content gets cited in AI answers.

The brands that build a real audience, people who genuinely want their content, get an advantage no tool can replicate. Owned channels feed directly back into search visibility.

Paid Media Key Takeaways

• Meta has introduced a location-based ad fee in some markets. Check whether your campaigns are affected and build the cost into your budgets.
• Google is testing healthcare ads inside AI Mode. Ads are moving into conversational surfaces, with new compliance requirements for regulated sectors.
• Preferred Sources now influence AI Overviews and AI Mode. A loyal audience is becoming a direct visibility asset.
• OpenAI has moved ChatGPT ads from testing toward a broader launch. It could be the first new demand-capture ad channel since Google launched PPC search ads. Budgets will be redistributed from Google and Meta as the channel proves performance. Align on measurement and attribution now.
• Across paid search, the edge keeps moving up the funnel, to offer quality, landing page strength, and how precisely you brief the automation.

Social Media Highlights

Meta expands Teen Account protections globally

Meta has rolled out its Teen Account protections worldwide, extending stricter default settings and content controls for younger users across its apps. Regulation around teen access has been a live issue all year, and Meta is moving ahead of it rather than reacting to it.

If your audience skews young, expect tighter targeting and content rules on Meta platforms. Building owned channels, email lists and your own website reduces your exposure to platform restrictions you can’t control.

Instagram lets users shape their own feed

Instagram has expanded controls that let users tell the algorithm what they want to see more or less of in the main feed. Reach is becoming more about genuine relevance to your existing audience and less about chasing the algorithm.

Post for the people you actually want to reach. Content that a specific audience consistently chooses to engage with travels further than broad, algorithm-first posting.

Social Media Key Takeaways

• Meta’s Teen Account protections are now global. Owned channels reduce your exposure to platform access rules you can’t control.
• Instagram is handing users more feed control. Genuine relevance to a specific audience beats broad algorithmic posting.

Web Design and Development Highlights

Bots have overtaken humans in web traffic

Cloudflare’s CEO confirmed a milestone he didn’t expect until 2027: bots and AI agents now generate more web requests than people do. Cloudflare Radar puts the split at roughly 57.5% automated versus 42.5% human. One important caveat: this measures HTTP requests, page loads and crawls, not total time spent online. Humans still dominate streaming, scrolling, and app use. The surge is driven by AI agents that visit hundreds or thousands of sites to complete a single user query.

Your site is now serving a significant volume of non-human traffic, which affects hosting costs and muddies your analytics. Check how much of your ‘traffic’ is automated, make sure legitimate AI crawlers can read your content cleanly, and keep an eye on server load. Structure your pages so the right machines can read them.

Critical Avada Builder flaw, patch this week

A critical unauthenticated arbitrary file deletion vulnerability has been patched in the Avada Builder WordPress plugin. Unauthenticated means an attacker does not need to log in to exploit it. Deleting the wrong file can take a site down or open the door to a wider compromise. The researcher who found it received a $3,600 reward, a clear signal of how seriously the vulnerability is rated.

This is the second serious Avada flaw in two months, following May’s critical SQL injection vulnerability. Two critical issues in one builder in two months is a pattern, not a coincidence. If your site uses Avada, update to the latest patched version now. “We’ll do it next week” is how most breaches start.

Wordfence Q1 2026: vulnerabilities nearly doubled in key categories

Wordfence’s Q1 2026 threat intelligence report is out, and the numbers are significant. In Q1 alone, 2,738 vulnerabilities were published, up 23.7% on the previous quarter. Common and dangerous vulnerabilities nearly doubled, rising 98% to 198. High threat vulnerabilities were up 20.6% to 158. The platform blocked 9.1 billion WAF attacks and 16 billion brute force attacks in the quarter, with 474,000 sites infected, up 1.4%.

Keep your plugin count lean, apply updates monthly, and remove anything you no longer use.

WordPress market share declines for six months running

WordPress market share has declined for six consecutive months. The overall drop is modest, from 43.6% to 43% across recent quarters, but the pace of decline roughly doubled from late 2025 onwards. WordPress still dominates by a wide margin, but competitors like Shopify, Wix, and Squarespace are gaining ground, particularly among brand-new sites.

This is a slowdown, not a collapse. The right question is whether your current setup is fast, secure, and easy for your team to manage. If it is, keep improving it. If it isn’t, this is a reasonable moment to weigh your options.

Web Design and Development Key Takeaways

• Bots now generate roughly 57.5% of all web requests. Check how much of your traffic is automated and keep an eye on hosting load.
• The Avada Builder critical flaw is patched; update to the latest version now. It is the second serious Avada issue in two months.
• Wordfence Q1 2026: 2,738 vulnerabilities published, up 23.7%. Common and dangerous vulnerabilities nearly doubled. Plugins remain the main risk; monthly updates remove most of it.
• WordPress market share is slowing, not collapsing. Choose your platform on fit, security, and ease of management.

Stay Ahead of Digital Marketing’s Evolution

June’s updates point in one direction. Regulators are forcing more accountability from Google, AI is reaching people through more surfaces on more devices, and the businesses that stay visible are the ones who keep their content accurate, their technical foundations clean, and their security up to date.

Bots now outnumber people in raw web requests. Common and dangerous WordPress vulnerabilities nearly doubled in a single quarter. A single unpatched plugin can undo months of good work. The companies that know what Google is doing to their site, because their Search Console is set up and verified, are the ones who act before a problem becomes expensive.

Subscribe to our monthly newsletter for clear, practical analysis. You’ll know what’s changing, and what to prioritise, before your competitors do.

Get Expert Support from Loop Digital

If June’s updates raised questions, the kind that are easy to put off and expensive to ignore, now is the time to answer them. Is your business showing up in AI Overviews and chatbot answers, or quietly disappearing from them? 

Is your Google Business Profile actually tracking calls and direction requests? 

Is your WordPress site one unpatched plugin away from a bad week?

Whether you’re getting your content ready for AI search across Google, Claude, and ChatGPT, linking your Business Profile to Analytics for proper local measurement, checking how the May core update affected your rankings, or locking down your WordPress site against the Avada flaw and the next one, we’ll help you work out what to fix first.

Book your FREE 30-minute consultation with Loop Digital, and we’ll help you:

• Get your content and data ready for AI Overviews, AI Mode, and generative answers across Google, Claude, and ChatGPT, so you’re cited, not missing
• Strengthen your organic SEO around the commercial and local searches that still convert, even as informational clicks fall
• Connect your Google Business Profile to GA4 so you can see calls, direction requests, and bookings properly for the first time
• Tighten your paid media and landing pages so the smaller, higher-intent traffic AI sends you converts into actual enquiries
• Secure your WordPress site, including your plugin maintenance schedule, before they become a problem