The feed
Martech news and analysis. Every story says what changed, why it matters and what marketers should do next.
ExpressVPN's research team published a Google Trends consistency study on October 21, 2026. Across 102 queries and three VPN locations, exact weekly matches were 39.9% over a year. The report does not investigate causes and ExpressVPN sells VPNs.
Why it matters
SEOs use Trends for demand and seasonality, so unexplained differences can mislead planning.
Cloudflare's October 21, 2026 post says its firewall blocked php2shell exploitation from 3:02 UTC, about nine hours before disclosure, and that the flaw leaked. It deployed 7 free, 7 paid and 1 response rule; attack volumes were not given.
Why it matters
It shows the window before public disclosure was not safe, and that firewalls are a second layer, not a fix.
CERT-EU's October 21, 2026 advisory covers two PHP flaws (CVE-2026-109618 and CVE-2026-109619), each rated 9.2, allowing unauthenticated remote code execution. PHP shipped fixes at 13:30 UTC; the NSA says systems should go offline if they cannot update.
Why it matters
A compromised site can be defaced, used to serve spam or malware and lose search visibility.
Chartbeat's Q3 2026 report, dated October 15 and covered by PPC Land on October 20, says search fell from 21% to 12% of North American publisher pageviews year over year. Nine of ten tracked regions declined; Africa rose from 41% to 46%.
Why it matters
Publishers built SEO strategies on search being the main referral source, and the share is shrinking.
In the second "Non-Canonical Cabinet" video, reported October 21, 2026, Gary Illyes said robots.txt governs whether a bot may fetch a page, not what a company does afterward. Blocking an AI crawler requires naming its user-agent token.
Why it matters
Many sites expect robots.txt to control training use, but it only controls fetching.
In an October 16, 2026 column, Augustine Fou argues click-based invalid traffic rates miss impression fraud on CPM buys, because bots paid on ad loads have no reason to click. He sells FouAnalytics and offers no alternative market figure.
Why it matters
Budget decisions and vendor claims use the $63 billion figure, so how it was built affects how much fraud advertisers believe they face.
In its Q3 2026 letter, published October 20, Netflix lowered its ad revenue expectation to about $2.7 billion from roughly $3 billion. Co-CEO Greg Peters said delays in ad products and partner integrations, not weak demand, were the cause.
Why it matters
It shows that building an ad business with outside partners takes longer than announced, which matters when you plan CTV budgets.
Netflix and The Trade Desk announced on October 20, 2026 that Kokai buyers can target Netflix ads with third-party or first-party data from November. Netflix also built a Netflix Pixel and expanded its Conversion API to over 20 events.
Why it matters
Advertisers have asked for the same audience and outcome tools on Netflix that they use elsewhere on CTV.
A WebKit post by John Wilander, Charlie Wolfe and Matthew Finkel says Safari 27 blocks third parties that resolve email addresses into persistent IDs. The code change was 11 lines, merged February 13, 2026. Apple names no companies.
Why it matters
Email-based identity underpins much of the open-web ad ecosystem, and Safari is a large share of that traffic.
A Citizen Lab report dated October 15, 2026 says ads bought by Israeli firm Discover-Tech delivered Candiru spyware to at least 45 Al Jazeera devices without a click. Google cut the vendor's access in early October.
Why it matters
Targeted ads can reach named individuals, so vendor vetting and inventory controls become security matters, not only brand-safety ones.
