6 min read

Meta hands campaign controls to its AI; WordPress 7.1.3 patches seven holes

**The three that matter** - **OpenAI launches visual ads alongside ChatGPT image results** - a new ad channel that reaches 1B+ users is live in the US as of Oct 5, with measurement partnerships already in place. - **Meta unveils five agentic AI tools at Advertising Week NY** - campaign creation, targeting, and budget adjustment can now be delegated to an AI business assistant inside Ads Manager. - **WordPress 7.1.3 drops with 7 security fixes** - a stored XSS on the Comments admin page and a SQL injection in WXR export are patched; update every site immediately.

Advertising & Ad Tech

  • OpenAI

    OpenAI's new visual ad format is live. Display-style ads now appear beside ChatGPT image-generation results, not inside them. US-only for now, launching later this month to an initial advertiser group. Ads are clearly labeled and OpenAI says they won't influence answers. Why it matters: This is a brand-new channel at scale. Measurement partners already announced include Hightouch, Tealium, LiveRamp, AppsFlyer, Adjust, Branch, Triple Whale, Kochava, Northbeam, and Singular. TechCrunch | OpenAI

  • Meta

    Meta announced five agentic AI tools at Advertising Week NY. The new agentic business assistant can create campaigns, change targeting, and adjust budgets. Advantage+ Creative now supports image-to-video, Advantage+ Audience is testing AI-driven audience discovery, and ecommerce brands can connect their product catalog to Meta Business Agent for in-chat purchases. Why it matters: These move campaign management closer to fully automated - worth testing on a live account before ceding control entirely. Common Thread Collective

  • Meta

    Meta's updated Commercial Terms take effect October 30. Any advertiser on Meta needs to review and accept before that date or risk account disruption. adlibrary.com

  • Meta

    Meta Marketing API v24.0 sunset passed on October 6. If any internal tools or integrations call v24 directly, they are now broken. The Commerce Order Management API sunset (47 endpoints, no replacement) hits all versions October 27. Why it matters: Check any custom integrations now. Common Thread Collective

  • Google

    Google opened Performance Max asset experiments to all advertisers on October 2. A/B test images, videos, and seasonal versus evergreen assets inside PMax campaigns. Common Thread Collective

  • GoogleLaw

    Google Customer Match now accepts IP addresses and interaction timestamps. IP data must be uploaded unhashed through Data Manager; matching is restricted for EEA, UK, and Switzerland users. This is the first new signal type added to Customer Match in years. Why it matters: Expands first-party data matching for non-EU accounts. Common Thread Collective

  • Google

    Google launched Multi-Source Conversions beta. CRM offline uploads can now fill in missing user data on tag-based conversion events. Why it matters: Better conversion completeness without full tag coverage. Common Thread Collective

Data & Privacy Law

  • Connecticut's amended privacy law took effect October 1. It bans controllers and third parties from selling precise geolocation data, adds facial recognition requirements, and creates a categorical prohibition on processing data of anyone under 18 for targeted advertising or sale - with no consent carve-out. Why it matters: Any campaign using location-based targeting or youth audiences in Connecticut needs a compliance review now. Privacy World Blog

  • Law

    France's CNIL is finalizing rules requiring explicit double consent for email tracking pixels. This is still a proposal, not a final rule, but signals tighter enforcement on open-rate and click tracking for EU email campaigns. secureprivacy.ai

  • New York's SB S8420A would require disclosure of AI-generated synthetic performers in ads. Civil penalties of $1,000 for first offenses, $5,000 for subsequent violations. Still a bill, not law, but worth tracking given how common AI-generated creative is becoming. American Bar Association

WordPress

  • WordPress WordPress 7.1.3 security and maintenance release dropped October 6. Seven security fixes and four bug fixes are included. Critical patches cover a stored cross-site scripting flaw on the Comments admin page, a SQL injection in the WXR export feature, unauthenticated disclosure of comments on private posts, and a bug letting Author-role users make posts sticky. Older branches (6.8.11, 6.7.10, 5.5.23, 5.4.24) were patched the same day; branches 4.7-6.5 may still be unpatched per Patchstack. Why it matters: Update every managed WordPress site today. Audit Contributor-role and above accounts as a secondary step. WordPress.org | Patchstack

OpenAI / ChatGPT

  • OpenAI

    GPT-6 with Intelligent UI launched October 7. ChatGPT can now combine text responses with diagrams, charts, forms, graphics, and tappable buttons depending on the request, and can stream partial answers while still processing. Rollout: Plus, Pro, Business, and Enterprise use GPT-6 Sol; Free and Go tier gets GPT-6 Luna. Why it matters: Richer output formats will change how users interpret and act on AI-generated content - including ad-adjacent queries. CXO Digital Pulse

  • OpenAI

    OpenAI DevDay 2026 announced GPT-6.1 Sol, computer use for the Agents API, a Decisions API, and cloud-based Codex environments. Developers can now build sidebar experiences, interactive conversation panels, and custom file viewers inside ChatGPT via plugins. InfoQ

Anthropic / Claude

  • Anthropic

    Claude Haiku 5.5 launched October 7. Anthropic calls it the fastest, cheapest, and most capable small model in the Claude 5 family. It costs approximately 75% less to run than the model it replaces and carries a 1M-token context window. Claude Code now uses Haiku 5.5 as its default Haiku model. Why it matters: Cost-sensitive agentic workflows just got significantly cheaper. 9to5Mac

  • Anthropic

    Sonnet 5.5 cache read prices halved. Anthropic says Sonnet 5.5 now runs approximately 20% cheaper on most agentic work as a result. Anthropic Release Notes

Supabase

  • Supabase

    Supabase raised $150M and agreed to acquire Turso on October 2. GIC led the round, just four months after a $500M Series F. Turso is a database startup whose technology could enhance Supabase Compute. SiliconANGLE | PR Newswire

  • Supabase

    Select 2026 conference dropped several product updates. Local dev now runs as native processes (no Docker required), the Explorer SQL editor is rolling out to all projects through October 12, and Health Check Advisors now flag elevated error rates in Data API, Auth, Storage, and Edge Functions. Supabase Blog

  • Supabase

    Breaking change incoming October 30. New tables in the public schema will no longer be automatically exposed to the Data API. If you run any Supabase projects, verify this against the official docs and update your setup before month end. Why it matters: Could silently break apps that rely on auto-exposed tables. Supabase Changelog

Big Tech

  • Microsoft

    Microsoft and Nvidia unveiled the Surface Laptop Ultra at a San Francisco event October 7. Microsoft claims it outperforms a comparable MacBook Pro M5 on locally run AI tasks, citing twice the prompt speed. These are Microsoft's own claims, not independent benchmarks. Bloomberg

  • Apple

    Apple reportedly planning a hardware event October 13 with a smart-home hub, a new HomePod mini, and an updated Apple TV 4K. Apple has not officially confirmed. Tech Startups

Sources

Every item above links to where it came from. Nothing runs that was not read first. How sourcing works. Found an error? Tell us and it gets corrected here, in the open.