Your Website Just Got a Safety Notice

It’s been a busy week for the web, with WordPress rolling out fixes and new features, scammers getting sneakier, and Google quietly changing how people find your site.

Here’s What Else Happened Online This Week


If you run a WordPress site for your home business or side hustle, there’s one thing to do before you read anything else: check for updates. Beyond that, it’s been a busy week for the web, with WordPress rolling out fixes and new features, scammers getting sneakier, and Google quietly changing how people find your site. Here’s what actually matters, in plain English.

1. WordPress patched a serious security hole – update now if you haven’t

WordPress released an urgent security fix (version 7.0.2) after researchers found two bugs that, combined, let an attacker take control of a site without even logging in. It sounds alarming because it is: this is about as serious as WordPress security issues get.

The good news is that most sites update themselves automatically, and WordPress has pushed this one out as a forced update because of how serious it is. But “most” isn’t “all”. If your site is managed by a developer, hosting company, or you switched off auto-updates at some point, it’s worth a five-minute check to make sure you’re running the latest version. If you’re not sure how to check, your hosting provider’s support team can usually tell you in a couple of minutes.

Why it matters: a hacked website isn’t just embarrassing, it can mean stolen customer data, your site being used to send spam, or Google blacklisting you as unsafe. None of that is worth skipping an update for.

2. WordPress is making the next update easier to use, not just safer

While that security fix was the urgent story, WordPress is also quietly testing its next big update (version 7.1, due mid-August), and one change stands out for anyone who edits their own site: right now, tweaking a colour or font and applying it “globally” changes everything on your site in one go, with no way to preview or undo it easily. The new version adds a proper review step, so you can see exactly what you’re about to change before you commit to it.

Why it matters: if you’ve ever nervously clicked “apply to all” on a style change and hoped for the best, this is aimed squarely at you. It’s a small change, but it makes DIY site editing noticeably less stressful.

3. Scammers are getting better at pretending to be “just business”

Away from WordPress itself, there’s a fresh wave of scams doing the rounds aimed squarely at small business owners. One version involves emails claiming an investment firm wants to buy your business, fishing for personal or financial details. Another trend security researchers are flagging is scam attempts disguised as routine office admin, things like invoices, meeting notes, or supplier updates, designed to blend in rather than stand out.

Why it matters: small businesses are being targeted more than ever, precisely because they often don’t have an IT team double-checking every email. The advice hasn’t really changed, but it’s worth repeating: be suspicious of anything unexpected asking for money, login details, or sensitive information, even if it looks routine. When in doubt, phone the person or company directly using a number you already have, not one from the email.

4. Google’s AI answers are quietly cutting website traffic

If you’ve noticed fewer visitors finding you through Google lately, you’re not imagining it. Google increasingly answers search questions directly at the top of the results page using AI-generated summaries, so people get their answer without ever clicking through to a website. Recent research suggests over half of searches now show one of these summaries, and a meaningful chunk of people stop there instead of visiting any site at all.

Why it matters: this hits small businesses hardest, since bigger companies can lean on email marketing, paid ads, or social media to make up the difference, but many small sites rely almost entirely on Google search for visitors. The silver lining is that Google’s AI summaries do pull information from real websites, so having clear, well-organised pages that directly answer common customer questions (opening hours, pricing, what you offer) still gives you a chance of being featured, even if the click doesn’t always follow.

The takeaway

None of this requires a big overhaul. This week, do one simple thing: log into your WordPress dashboard and confirm you’re on the latest version. Then, next time you update your site’s content, write it the way you’d answer a customer’s question out loud, clearly and directly, since that’s increasingly what both Google and your visitors are looking for.

← Back to Blog