Nishat's Monthly Reads 📖 Issue #5: The September 2026 Catch-Up

September 1–30, 2026 | 153 Articles

September was the month AI agents stopped being a demo. Meta’s Muse hit No. 2 on the US App Store, WordPress people argued about letting agents in the front door, and Google kept moving answers off websites and into AI Mode. Somewhere in the middle, Automattic’s board tried to push Matt Mullenweg out and lost within 33 hours. Here’s from 499 articles, major 153 articles I read.

🔍 Google, AI & Search

Spam updates and recovery

Google’s August 2026 spam update hit rankings harder than normal: SE Ranking data shows 82% more top-10 pages fell past position 100 than in a normal week.
Google’s August 2026 Spam Update: Scaled Content Abuse, AI Content, Programmatic Content, Thin Affiliates [Case Studies]: Glenn Gabe walks through four hit sites. One lost over 200,000 ranking queries.
Google September 2026 Spam Update Is Rolling Out: The fourth spam update of 2026, global, with a rollout of up to two weeks.
Google Has Deployed A New AI Spam Detector Called SAFE: Google’s new system uses four AI agents to track down networks of AI spam sites.
Update to the Site Reputation Policy: Google stopped enforcing parasite SEO penalties for searchers in Europe from August 30.
Google Says Ranking Recovery Takes Months After SEO Issues Are Fixed: John Mueller says recovery can take “many months,” and disavow files work over three to six.
Google Can Lose Faith In Sites Based On Low Value Programmatic SEO Pages: Mueller warns that thin programmatic pages can cost a whole site Google’s trust.
Google Says The Disavow Tool Does Have Effects: It works, Mueller says, but most sites still don’t need it.
Has Google demoted listicles?: Kevin Indig studies 5.32 million search results to see how “best of” posts are doing. Paywalled.

AI Mode and AI Overviews

Google Making AI Overviews Into AI Mode Responses: Some AI Overviews now open as full AI Mode answers, pushing the blue links further down.
Google AI Overview Links Taking You To AI Mode Over Web Pages: New links at the bottom of AI Overviews lead to more AI Mode, not to websites.
How to book travel with AI Mode in Google Search: Flight price alerts, points and miles rates, and hotel booking with Booking.com, Expedia and Marriott.
Google Testing Text Link Ads In Google AI Mode: Ads that look like normal AI answer text, with a small “Sponsored” label.
Almost All People Also Ask Results Are Google AI Overviews: AlsoAsked data: 97% of People Also Ask answers are now AI Overviews, up from 12% last year.
What Wikipedia Reveals About AI Overviews And Web Traffic: A university study estimates AI Overviews cost Wikipedia about 100 million Google visits a month.
Google testing “Dive deeper” for Google Discover: it’s not good for publishers: A new Discover button opens a Google-written summary instead of the publisher’s story.

Search Console and measurement

Google Search Console Generative AI Performance Report & AI Control Live: AI search impressions are now in Search Console for everyone, plus a toggle to opt out.
Google Admits Search Console Reporting For AI Search Is Inadequate: No clicks, no queries, and no useful position data yet. Mueller explains why.
There Is No “Accuracy” in AI Search Tracking, Only Precision: Mike King shows why five test runs give a ±44-point margin. Read before buying a tracking tool.
Which Data Sources Should You Care About for AI Search?: Chris Green on which AI search data sources deserve your attention.
Google confirms deploying goto URL redirects to search results links: Result links now pass through google.com/goto, likely to slow down scrapers.

Publishers and Europe

Google Search Decline Steepened To 40% YoY For Publishers: Chartbeat data: Google search referrals fell 40.2% in a year, and Discover fell 34.3%.
Google rolls out pay-per-value AI licensing program to publishers: Google pays some publishers when their content feeds AI answers. Early offers are called “lowball.”
Google tests paying publishers for using its content in AI Mode, AI Overviews and Gemini: The payments show up as a monthly figure in Search Console, with no breakdown.
Google updates Search profiles with design update, lower subscriber requirements and single login: The bar dropped from 100,000 followers at launch to 10,000.
Google Search Profile Badges Expose The Publisher Traffic Crisis: A new site badge for US creators, read as a response to AI search traffic losses.
Google Says EU DMA Changes Resulted In Largest Reduction In Search Quality: Google calls the EU changes the biggest quality drop in its 29 years. Hotel traffic fell 10%.

Forums, citations and AI visibility

Analysis: Reddit Appears in 83.9% of Google’s Discussions and Forums Results: Ahrefs checked 145 million results. Backlinks made no difference to which threads showed up.
Facebook Groups Are Google’s No. 2 Forum Source: Public Facebook Group posts show up in 38.3% of forum results, ahead of Quora.
Reddit AI Search Picks Already-Popular Comments, Audit Finds: Reddit’s AI answers favor formal, upvoted comments and drop most personal experience.
AI Tools Recommend Brands But Cite Other Sites, Data Shows: Brand-owned pages were only 2.8% of 1,851 cited sources. Review sites got the links.
AI Citation Test Finds Source Order Matters Less Than It Looks: Swapping source order changed almost nothing. Headings and lists helped a little.
A study of query fan-out in ChatGPT using brand searches: 189 brand prompts produced 1,797 hidden searches, and many used site: on the brand’s own domain.
ChatGPT built its own search index: ChatGPT runs its own index of about 12 parts but still pulls from Google and others.
Claude Searches Web Differently From Claude Code, Data Shows: Claude searched the web in 93% of prompts, Claude Code in only 13%.
Inside Personalized AI Search: How Private Data Shapes Brand Discovery: Emails mentioning a brand lifted its AI visibility 40% in Garrett Sussman’s test.
I Tested and Tracked 60 LinkedIn Posts Ranking in Google & AI Overviews: LinkedIn posts rank fast and drop fast. 37% fell out within a week. Videos held on.

AI agents and the web

What Is WebMCP? How to Prepare Your Website to Serve AI Agents: Moz’s explainer on WebMCP and getting a site ready for AI agents.
Agentic Search Readiness Audit Framework + Free Skill: A six-step audit to test if agents can finish tasks on your site, plus a free tool.
Google Lighthouse Adds Audit For AI Agent Resource Discovery: Lighthouse 13.5 now checks whether agents can find a catalog of your site’s tools.
Some Sites Use llms.txt Like robots.txt, Common Crawl Finds: Of 584,107 llms.txt files, 68% came from a plugin. The file blocks nothing.
Cloudflare Lets Sites Disallow AI Training Without Blocking Googlebot: One setting says no to AI training and keeps search crawlers allowed.
Google’s Mueller Shares His Experience With Markdown For AI SEO: Mueller tested Markdown pages for AI. The only bots that asked for them were SEO tools.

SEO practice

Entities Are The Foundation of Modern SEO: Harry Clarkson-Bennett on making Google sure who you are, and watching for “entity drift.”
The Semantic Data Layer: Building a Brand AI Can Understand: Connected schema fixed some AI Overview mistakes for Wells Fargo. One old post made AI name a former CEO.
Attention, Crawl, Render: 3 Budgets Shaping Every Architecture Decision: Crawl budget is one of three. Mostly matters for sites over 100,000 URLs.
2026 Google Ranking Factors Expert Survey: 131 SEOs picked relevance, backlinks and content quality as the top three.
What 1.8 million Google Business Profiles tell us about local SEO success: A complete profile ranked about 19 positions higher. Specific categories beat broad ones.
2026 Study: How Keywords in Business Names Impact Google Local Rankings and AI: Keywords in business names still correlate with top-3 local rankings in most industries.
How We Use AI for Every Article Without Making AI Slop: Ahrefs uses AI on every post. Their line: slop moves the effort from writer to reader.
How to build your first AI SEO agent (full walk-through): Nine steps to an agent for keyword research and briefs, with a human approving each step.
AI SEO Myths and Facts: 324,000 AI bot visits in the logs, zero requests for llms.txt from ChatGPT, Claude or Grok.

🛠️ WordPress & Web Dev

Automattic board crisis

Automattic’s board forces CEO Matt Mullenweg into leave of absence: The board put Mullenweg on leave and made CFO Mark Davies interim CEO.
Sources say Automattic’s board is out after failed attempt to oust CEO Matt Mullenweg: Mullenweg was back after 33 hours. The directors, the CFO and the legal chief were out.
One Week After Board Crisis, Automattic Employees Say They’re Being Kept in the Dark: The Repository on how the crisis looked to staff a week later.
Automattic has a new board after failed attempt to put CEO on leave: The new board includes a sci-fi author, a breakup coach and two startup founders.

WordPress Security

The Core Security Initiative: The security team’s three-part plan for the flood of AI-found bugs, including AI scanning.
WordPress Tightens Bug Bounty Scope After Monthly Security Reports Nearly Double to 773: Reports went from 20 to 30 a month to 773 in August. Low-risk bugs no longer pay.
WordPress.org Can Now Automatically Block High-Risk Plugin Updates Before They Ship: Every plugin release now gets an AI security scan, and risky ones are held back.
WordPress 7.1.1 Ships 11 Security Fixes, Credits Anthropic and pwn.ai Again: Eleven fixes in one release, with AI companies credited for finding bugs.
WordPress 7.1.2 Security Release: Unauthenticated LFI to RCE: A 9.2-severity flaw affecting every version from 4.7 to 7.1.1. Update if you haven’t.
WordPress Security Statistics 2026: Melapress Survey Results: 67.7% had a security incident. Only 27.9% had a recovery plan.
Aaron D Campbell on Navigating WordPress Security in the AI Era (WP Tavern podcast): Big flaws now get attacked about five hours after they’re made public.

What’s next for WordPress core

Roadmap to 7.2: Due early December: suggestion mode in Notes, re-login for sensitive actions, and a Secrets API.
Introducing Ipsum, the new default theme: A minimal blog theme, and the end of year-based default theme names.
Moving to a server-aware approach for collaboration: Real-time editing is coming back with the server checking every edit. Not ready for core yet.
Why Real-Time WordPress Is the Future: A podcast with Jared Rethman, who builds real-time features for WordPress with WPSignal.
WordPress Trac MCP server: Make Core’s announcement of an MCP server for WordPress Trac.
The AI-Powered WordPress course is now live on Learn WordPress: A free nine-hour course. The first three modules need no code.

WordPress and AI agents

Is WordPress ready for the agentic web?: Core has the tools, plugins don’t yet. Agents she tested ignored special files and read the HTML.
Ideas for WordPress in an agentic world: Andy Peatling’s ideas for WordPress in a world of AI agents.
WordPress should open the door for agents: Teddy’s argument for WordPress welcoming AI agents.
Why WebMCP is going to be big for WordPress, and how to try it today: Jamie Marsland on WebMCP for WordPress and how to test it now.
AI Agents for WordPress: What Helps and What Still Fails: Abul Khoyer’s notes on where AI agents help with WordPress and where they fall short.
Five ways Claude Code failed on a 240,000-line WordPress plugin: Five failures from using Claude Code on a very large plugin.
AI-Generated Websites vs. WordPress: A Comparison from a WordPress Agency: Static AI sites suit one-page sites. Teams that publish often still need a CMS.
EmDash 1.0: the stable CMS with a secure plugin registry: Cloudflare’s CMS hits 1.0, with sandboxed plugins that get only the access you approve.

Business, WooCommerce and WordPress community

What decides whether a WordPress agency makes money: GravityKit on what separates profitable WordPress agencies from the rest.
WooCommerce Devs Aren’t Marketers, and That’s the Problem: Business Bloomer on WooCommerce developers who build well but market poorly.
WordPress.org has nailed content distribution (you can do the same): Distribution lessons from WordPress.org for product teams.
Building Trust: A Checklist for WordPress Plugin Developers: A checklist for plugin makers on earning users’ trust.
Interview with Barn2 co-founder Katie Keith: Barn2’s new sales fell for two years as buyers moved from Google to AI search.
Zero clean: 72 WooCommerce stores: An audit of 72 WooCommerce stores. None came back clean.
Black Friday Has Changed. Has Your WooCommerce Strategy? (video): A video on Black Friday planning for WooCommerce stores.
Home ownership and the world wide web: Once a client wants to edit their own site, a static site stops working.
31 WordCamps Later: Community, Contribution, and a Lot of Fun in Phoenix: Mainul Kabir Aion’s 31st WordCamp. Contributor Day drew 425 people across 26 teams.
WordCamp US 2026: What Went Right, What Went Wrong: A critical recap. Only 32.7% of surveyed contributors felt positive about WordPress.

Threads might be bigger than X, says Zuckerberg: Threads had 500 million monthly users in June. X has about 550 million.
Facebook Pages get charged for link posts: Some Pages now get two link posts a month unless they pay. Publishers are exempt.
Meta launches subscriptions with enhanced AI features: Meta One plans run from $2.99 to $499 a month across its apps.
Facebook ad costs fall as traffic and lead performance improves: Clicks got 14% cheaper. Cost per lead barely moved, at $27.39.
Instagram chief shares algorithm insights and posting tips: Adam Mosseri says watch engagement rate, not total views, and favor original posts.
Instagram collab posts drive higher organic engagement across brand sizes: Small brands got five times more interactions on collab posts published by creators.
Instagram Will Demote AI-Generated Influencers If They Don’t Clearly Label Their Account: Unlabeled AI influencer accounts lose reach. Labeled ones keep it.
X Money will be the only payout option for US creators: US creators now get paid only through X Money, and need Premium to qualify.
X shares more insight into penalties impacting post reach: X now tells you if a country’s laws limited who saw your post.
X revives Twitter’s Lead Gen Ads: Back after ten years: in-app lead forms that fill themselves after the first use.
LinkedIn ditches post enhancement, launches Post Proofreader: LinkedIn dropped AI rewrites. People reported AI slop a million times in three weeks.
LinkedIn tests Network tab to encourage engagement among connections: A test feed with posts only from people you chose to connect with or follow.
YouTube Says Bigger Thumbnails Drove More Long-Form Views: Fewer, bigger thumbnails got more people watching. YouTube’s lesson: “often less is more.”
YouTube presents new AI and engagement features at Made On 2026: Custom feeds from prompts, Shorts series, live auto-dubbing, and affiliates in 35 markets.
YouTube executives share strategies on channel pivoting: Before changing topics, check if viewers got bored or you did. Style can matter more than topic.
YouTube adds Amazon affiliate links: Product tags got 110% more clicks than links in the description.
Google says better YouTube creative can more than double ROI: A human voice lifted conversions 12%. Creative drives about half of campaign ROI.

🤖 AI Industry & Tools

Introducing Claude Fable 5.1 and Claude Mythos 5.1: About 25% cheaper than Fable 5, and more than twice as good on a science coding test.
Introducing Claude Opus 5.5: 40% cheaper to run than Opus 5, priced at $4 and $20 per million tokens.
GPT-6 Astra: A new generation of intelligence: OpenAI’s top model, at $10 and $50 per million tokens, enterprise customers first.
Introducing GPT-6 Sol and Luna: Two cheaper GPT-6 models at about half the price of GPT-5.6, same day as Opus 5.5.
Introducing Gemini 3.8 Flash and 3.8 Flash Cyber: A cheap fast model, plus a security version only for trusted defenders.
Introducing Grok 4.7: Big coding gains over Grok 4.6, at $2 and $6 per million tokens.
ChatGPT loses AI market share to Gemini and Claude as prompt share falls from 70% to 50%: In six months Gemini went from 17% to 30% and Claude from 2% to 11%.
OpenAI’s ad business hits $1 billion annualized revenue run rate: ChatGPT ads reached $1 billion a year in about 200 days.
OpenAI is turning ChatGPT ads into conversations: A click on these ads opens a chat with the brand’s own AI agent, not its website.
Amazon gives OpenAI’s ad business a boost with ChatGPT partnership: Advertisers can now buy ChatGPT ads through Amazon’s ad platform.
ChatGPT Shopping Results Lean Hard On Product Feeds: Overnight, feed-based results went from 8% to 62%. Two in three stores lost visibility.
How businesses win when AI does the shopping: AI shoppers convert 42% better. Microsoft says clean product data comes first.
A guide to the anatomy of effective commerce agents: Anthropic says one model with good tools and tests beats complex routing setups.
Meta’s AI agent Muse is now the No. 2 app in the US: Muse reached No. 2 on the US App Store within days of launch.
Amazon blocks Meta’s Muse AI assistant in new standoff over agentic shopping: Amazon says Muse shopped without saying it was an AI agent.
Anthropic merges Claude chat and Cowork in one interface: One window for chat and agent work, with Claude choosing the right mode for you.
Inside ‘Project Lily’: The Humans Reading Your ChatGPT Chats: Hundreds of contractors read real ChatGPT chats. You can opt out in settings.

✍️ Creator Economy & Newsletters

The Crossing Guard Making $14,000 a Month Mailing Out Her Musings From the Job (WSJ): A handwritten mail club at $8 a month, with 2,000 subscribers and 3,600 on the waitlist.
Politics newsletter makes nearly $4m in subs despite giving most content away: Tangle gives away 85% of its content and still turns 16% of readers into paying members.
How one newsletter writer is building a subscription business when “paywalls don’t really work”: Nieman Lab on a newsletter writer earning from subscriptions without leaning on a paywall.
Stop selling ads. Do this instead: Sell partnership packages. A yearly partner can be worth 20 to 50 single ads.
Hacking the math problem behind newsletter subscriber growth: Know what a subscriber is worth, prove engagement, then scale one paid channel.
Workweek Raises $17 Million, Debuts B2B Newsletter Platform: Workweek is opening its B2B newsletter tools to many more creators.
How Time Turned Events Into Its Biggest Revenue Driver: Events should bring in over half of Time’s revenue this year, up from 28% in 2023.
The Creator-Founder Divide: Six lessons from Austin’s New Media Summit on turning content into a business.
Substack Changed. Most Creators Haven’t Noticed Yet.: A writer’s take on how Substack has changed this year.
How to Grow on Substack with Notes: Turn Strangers Into Subscribers: Big creators get 30% to 60% of their list from Notes. Here’s the playbook.
I’m A Bestselling Author On Substack. Here’s What I Wish I Knew Sooner: Matt Lillywhite’s lessons from growing a Substack bestseller.
Four ways traditional media can work with Substack: From moving fully to Substack to letting reporters earn on their own.
beehiiv for Enterprise 2026: How Businesses Build Owned Audiences: Business newsletters take a median of 197 days to reach 100,000 subscribers.

💼 Marketing & Career

MBA Metrics for SEO: How to Speak Leadership’s Language: Turn SEO metrics into business terms. Share of search tracks market share closely.
The B2B marketing mistake that’s costing you the deal: LinkedIn’s marketing blog on a common B2B mistake that loses deals.
When Attribution Looks More Precise Than The Data Behind It: GA4 said 150 conversions, the CRM said 120 customers. Trust the CRM.
The CAC is Too Damn High: Eli Weiss on rising customer acquisition costs.
Top 1%: Inside GTM Engineering at the GTM Company: Clay’s GTM lead on growing with automation and better data instead of more hires.
6 years in, $6 million far: Ten people, $6M a year, and 43% of new users now find Tally through AI assistants.
How I succeed by starting companies that (mostly) fail: About 40% of Andrew Wilkinson’s companies work. The five things the winners share.
Why Do I Choose To Invest in Bangladeshi Tech Startups?: M Asif Rahman on why he invests in Bangladeshi tech startups.
Deflection is Not a Support Strategy: Automattic calls deflection rate “a measure of how good we are at not talking to customers.”
Stop Refunding Your Customers For Every Silly Mistake: Eli Weiss on handling mistakes without giving a refund every time.
Issue #31: Trial Fraud Can Kill Your Software Business. But Don’t Kill Your Free Trial Over It.: On fighting free trial abuse without killing the free trial.
Issue #48: Redline Construction Stopped Logging In for Five Weeks. Nobody Noticed Until the Cancellation.: A customer went quiet for five weeks, then cancelled. A churn case study.
I Made 4 AI CX Skills You Can Steal: Eli Weiss shares four AI skills for customer support teams.
The Complete Guide to UX Laws: 33 Principles, Their Real History, and How to Use Them: All 33 UX laws, where they came from, and how to use them.
Cognitive Load in UX Design: The Real Reason Your Users Feel Tired: Part of the same UX laws series, on mental effort in interfaces.
How Much Thinking Goes Into Your Content?: Sara Taher asks how much real thinking goes into the content you publish.
I Built an MCP for SEO. Then I Analyzed My Own Entity.: Sara Taher builds an SEO tool on MCP and tests it on her own name.
The State of Ecommerce 2026: 89% of people who shop with AI still use search. AI picks can give a brand a 2-to-1 edge.
2026 Blogging Statistics: Only 13.9% of bloggers report strong results, an all-time low. 92.4% now use AI.

That’s 153 reads from September. If something here was useful, or completely wrong, hit reply and tell me. See you next month.

Previous monthly recap: Nishat’s Monthly Reads 📖 Issue #4 — The August 2026 Catch-Up