Self-hostable OSINT for turning dark-web investigation queries into organized danger intelligence. Built for safety researchers, threat-intelligence teams, and authorized investigators who need collection, enrichment, association mapping, and export in one workflow.

pip instal voidaccess voidaccess examine "LockBit ransomware" --no-llm --no-tor --depth shallow voidaccess list voidaccess actors voidaccess status

• Parallel collection - searches Tor indexes, paste sites, code forges, safety feeds, and curated .onion seeds.
• Entity extraction - finds IOCs, wallets, credentials, handles, vulnerabilities, actors, malware, people, and organizations.
• Multi-source enrichment - adds reputation, breach, passive DNS, sandbox, blockchain, and threat-feed context.
• Actor intelligence - persists aliases, infrastructure, notes, timelines, and cross-investigation relationships.
• Relationship graphs - builds co-occurrence graphs, communities, paths, and infrastructure clusters.
• Content safety - filters prohibited queries, URLs, content, and extracted entities at mandatory pipeline gates.
• Structured exports - produces STIX 2.1, MISP, Sigma, YARA, Snort, Suricata, CSV, Markdown, JSON, and IOC packages.
• CLI and web UI - runs locally alongside SQLite or as a Docker Compose stack alongside PostgreSQL and a browser interface.

Full pipeline behavior, timeouts, recovery, and data stream are documented in Architecture.

Sources that need API keys skip cleanly whenever their keys are absent. The complete key and configuration citation is in Architecture.

The default facility can run without PyTorch. When the embedding stack is unavailable, VoidAccess logs that it is using a deterministic SHA-256 fallback encoder. Install the optional NLP requirements to allow full sentence-transformer vector embeddings:

pip instal "voidaccess[nlp]"

Optional clearnet requests can use ScrapingAnt alongside --use-scraping-api or --use-proxies; Tor, .onion, GitHub, and GitLab traffic are unaffected.

Run the complete PostgreSQL, Tor, FastAPI, and Next.js stack alongside Docker Compose. The self-hosting guide covers guided setup, surroundings configuration, operations, and troubleshooting.

MIT. Use VoidAccess lone for authorized safety investigation and threat-intelligence work; see the Usage Policy.

Read next

Bagaimana Komputer Bisa Melihat?

Channel ini menyajikan materi seputar Data Science & Artificial Intelligence, Networking & Cyber Security, serta Database & Programming. Seluruh materi disusun secara sistematis untuk membantu Anda memahami konsep, teknologi, dan praktik yang digunakan di bumi teknologi informasi, mulai dari tingkat alas hingga lanjutan. Setiap bahasan berfokus pada pengembangan keahlian melalui materi yang gampang dipahami, relevan dengan kebutuhan industri, dan disampaikan untuk tujuan edukasi. Seluruh konten mengedepankan implementasi teknologi secara legal, etis, dan bertanggung jawab, sehingga dapat menjadi rujukan belajar bagi pelajar, mahasiswa, maupun profesional. Jika Anda mau mengembangkan kapasitas di sektor pemrograman, pengelolaan data, kecerdasan buatan, jaringan komputer, maupun keamanan siber, channel ini menyediakan materi yang dapat membantu membangun fondasi ilmu sekaligus menaikkan keahlian secara bertahap. Playlist video terkait: ▪ https://www.youtube.com/playlist?list=PLZGgeqmsm32s ▪ https://www.youtube.com/playlist?list=PLZomBNpDl3vc ▪ https://www.youtube.com/playlist?list=PLE5VyXMZkzb8 PEMBAHASAN MATERI Playlist Materi Ilmu Komputer berisi kumpulan video pembelajaran, tutorial, klarifikasi konsep, studi kasus, demo, dan bahasan komplit seputar beragam sektor dalam ilmu komputer. Materi yang disajikan mencakup alas hingga tingkat lanjut, mulai dari pemrograman, pengelolaan database, jaringan komputer, keamanan siber, mekanisme operasi, pengembangan alat lunak, arsitektur komputer, hingga beragam teknologi yang digunakan dalam bumi komputasi modern. Temukan bahasan mengenai komputer dan pemrograman, algoritma, struktur data, PHP, JavaScript, Python, Laravel, MySQL, PostgreSQL, API, rekayasa alat lunak, database, jaringan komputer, pengelolaan server, cloud computing, virtualisasi, Linux, Windows Server, keamanan jaringan, cyber security, ethical hacking, kriptografi, keamanan aplikasi, DevOps, Internet of Things (IoT), kecerdasan buatan (AI), machine learning, serta beragam konsep, teknologi, dan praktik terbaik di sektor ilmu komputer. Playlist ini cocok bagi pelajar, mahasiswa, programmer, web developer, software engineer, pengelola sistem, ahli IT, maupun siapa saja yang mau mempelajari dan memperdalam wawasan di bumi ilmu komputer secara menyeluruh. CONTACT US ▪ Email support@mycoding.id ▪ WhatsApp https://wa.me/6281274309663 ▪ Telegram https://t.me/mycodingxd OFFICIAL LINKS ▪ Web https://mycoding.id ▪ Blog https://blog.mycoding.id ▪ News https://en.mycoding.id ▪ Apps https://play.google.com/store/apps/dev?id=5237501547073493079 SOCIAL MEDIA ▪ https://linkedin.com/company/mycodingxd ▪ https://facebook.com/mycodingxd ▪ https://instagram.com/mycodingxd ▪ https://tiktok.com/@mycodingxd ▪ https://twitter.com/mycoding_xd ▪ https://pinterest.com/mycoding_xd CHANNEL LINKS ▪ YouTube https://safelink.asia/youtube ▪ DailyMotion https://safelink.asia/dailymotion ▪ WhatsApp https://safelink.asia/whatsapp ▪ Telegram https://safelink.asia/telegram Powered by https://linkedin.com/company/401XDGroup #CyberSecurity #ArtificialIntelligence #Networking #DataScience #Programming #Database

Read next

The article Regain Control Of Google Ads: Better Tracking, Clearer Proof Of ROI appeared archetypal on Search Engine Journal.

Your phone figure is the skeleton key to your digital life, and carriers have spent years handing out copies to anyone alongside a decent script. Resetting a financial institution password, recovering an email account, approving a crypto withdrawal: All of it can run through a content communication sent to a figure that a call-center rep can reassign in minutes.

The fine news is that all three important U.S. carriers now let you fastener your figure alongside a toggle. Here's how the attacks activity and anywhere to discover all switch.

How SIM swaps and eSIM hijacking work

A SIM toggle starts alongside research. Attackers collect your name, address, and document particulars from data breaches or phishing, afterward communication your transporter pretending to be you. If they convince person to move your figure onto a SIM they control, your calls, texts, and two-factor codes go to them instead. A near related is port-out fraud, anywhere the attacker opens an document alongside a distinct transporter and arranges for your figure to be transferred there.

You May Also Like

The measure is difficult to pin down, but the FBI's Internet Crime Complaint Center logged 982 SIM toggle complaints and concerning $26 myriad in losses in 2024, downward from 2,026 complaints and $72.7 myriad in 2022. That decrease looks encouraging, but the figures lone contain crimes that victims bothered to study to one national portal.

eSIMs removed the synthetic card, not the feeble link. Researchers at the Russian resolute F.A.C.C.T. established that attackers now interrupt into a victim's transporter account alongside taken or leaked credentials, create a QR code, and scan it on their own device. Your lawful SIM is deactivated at the identical moment. There's no shop sojourn and no phone call to a rep.

Intel 471 additionally flagged a provider that let the activation code go to email alternatively of SMS, which gave attackers a second inbox to compromise. That provider has since closed the loophole, but the instruction stands: Every shortcut for locked-out customers is additionally a shortcut for criminals.

What SIM locks and port-out PINs really do

Carriers now recommendation three overlapping defenses. A SIM fastener blocks SIM or eSIM changes and equipment upgrades; a port-out fastener stops your figure from moving to another carrier; and a PIN adds a password inspect whenever you communication client assistance or petition a transfer.

I'd treat the PIN as the weakest of the three. PINs aren’t bulletproof since business reps can motionless override them. A fastener that grays out the choice entirely is much harder to conversation your way around.

In its 2023 order, the FCC instructed wireless providers to recommendation customers a liberated document fastener and to notify them of SIM alter and port-out requests. Compliance deadlines were pushed rear until national paperwork assessment finishes, though, so don't assume all transporter has implemented these features fully.

How to fastener your figure on AT&T

AT&T bundles everything into a sole toggle called Wireless Account Lock. According to AT&T's assistance page, it blocks equipment upgrades, SIM and eSIM swaps, IMEI changes, figure changes, transfers to another carrier, and edits to authorized users and billing info. You can motionless pay your bill, alter plans, and unlock a device.

To rotate it on (postpaid):

1. Open the AT&T app on a equipment that's energetic on your wireless account, and sign in.

2. Tap the individual icon.

3. Scroll to Wireless document lock.

4. Swipe to lock.

Prepaid customers prosecute a distinct path: Sign in, choose your number, tap Profile & Settings, afterward Account Info & Preferences, and choose Turn on under Wireless Account Lock. AT&T texts a one-time code to confirm.

Only users alongside chief or secondary admission can flip the switch, and AT&T emails the document holder and texts all energetic figure whenever the fastener changes. I akin that. A silent alter is the entire item of these attacks, so noisy notifications are fractional the defense.

How to fastener your figure on Verizon

Verizon splits the job in two. SIM Protection blocks unauthorized SIM and equipment changes, during Number Lock blocks your figure from being transferred to another carrier. Verizon's own records notes that Number Lock solitary doesn't forestall SIM cardstock changes, so you desire the two switched on.

To allow them:

1. Open the My Verizon app.

2. Tap the Me tab, afterward Edit overview and settings.

3. Find SIM Protection and toggle it on for all row you desire covered.

4. Find Number Lock and do the same.

After you disable SIM Protection, SIM changes and upgrade orders remain blocked for another 15 minutes. And if you always harbor out, Number Lock must be off before you can create a Number Transfer PIN. Two toggles is slightly additional homework than AT&T's sole switch, but it lets you fastener the figure during leaving equipment upgrades open, which is helpful if you toggle phones often.

How to fastener your figure on T-Mobile

T-Mobile additionally uses two features. SIM Protection blocks SIM and eSIM changes, and Port Out Protection blocks transfers to another carriers. Both are free.

To allow SIM Protection on a postpaid document in the T-Life app:

1. Tap the Manage tab, afterward the equipment icon.

2. Select Security, afterward SIM Protection.

3. Toggle safety for the entire document or for idiosyncratic lines.

4. Tap Save Changes, afterward Continue.

Port Out Protection plant alternatively since it's an add-on you use to all row separately. In T-Life, go to Manage, afterward See Plans, afterward Manage add-ons, and inspect the box next to Port Out Protection. Repeat for all row on the account.

On T-Mobile's side, authorized users can add either feature, but lone the Primary Account Holder can eliminate them. The per-line setup is tedious on a big family plan, although it's value the ten minutes. T-Mobile additionally recommends environment an document PIN of 6 to 15 digits, which you can lone alter from the chief holder's phone during on T-Mobile's network alongside wifi off.

What these locks don't cover

A fastener protects against changes made through your carrier—it doesn't defend against person who already has your transporter login, who power be capable to toggle it off.

AT&T at smallest requires its app on a equipment energetic on your account, which raises the bar. Still, researchers propose distinctive passwords and two-factor authentication on the transporter document too.

Remember to unlock before you upgrade your phone or move an eSIM, since all transporter volition obstacle you otherwise. Flip it rear on afterward.

The bigger fix is to halt letting your phone figure defender item valuable. Switch your bank, email, and crypto accounts to an authenticator app or a passkey anywhere you can. Think of the transporter fastener as a seatbelt: You'll rarely need it, and you'll be glad it was buckled the one period you do.

Here is a recap of what happened in the hunt forums today, through the eyes of the Search Engine Roundtable and another hunt forums on the web.

Google seems to not display AI Overview labels for all AI Overviews in Search. Google may have had issues handling URLs alongside brackets in them. Google Business Profiles evaluation verification alongside authorities IDs. Google Business Profiles has a postpone alongside assessment appeals. The Google Ads squad posted a new assistance document that talks concerning the dimension of booking bid adaptation in bequest Hotel campaigns versus Search campaigns for travel. Google is evaluation removing the HR, thematic row interrupt or horizontal regulation line, that is established under the hunt tabs under the hunt box in the hunt results page. Microsoft seems to be evaluation not showing sitelinks under the chief Bing hunt outcome snippets.

Search Engine Roundtable Stories:

• Google Removes AI Overviews Labels On Some AI Overviews
  Google seems to be removing the AI Overviews tag from several of the hunt results that are AI Overviews. The desktop type is missing the AI Overview label, during the mobile type has the AI Overview label.
• Google Business Profiles Verification With Government ID
  Google is evaluation a new way to verify your Google Business Profiles, the method is by uploading a photo of your authorities ID. This is in supplement ot the phone/text, email, live video call or snail communication verification methods.
• Google Hotel Ads Legacy Length Of Booking Bid Adjustment Doc
  The Google Ads squad posted a new assistance document that talks concerning the dimension of booking bid adaptation in bequest Hotel campaigns versus Search campaigns for travel. Hotel campaigns multiply your basis bid by the traveler's itinerary dimension of remain (LoS) but Search campaigns for journey (SCT) don't.
• Google Search Internal Issues With Square Brackets [] Punctuations In URLs
  Google Search had several issues handling quadrate brackets symbols marks (i.e. [ ]) inside URLs. John Mueller from Google responded to erstwhile Googler, Vanessa Fox, saying that he is "seeing several of the issues internally that came up alongside these kinds of characters in the URL."
• Bing Tests Not Showing Sitelinks
  Microsoft seems to be evaluation not showing sitelinks under the chief Bing hunt outcome snippets. I am honestly not certain if this is new but I was capable to replicate Bing showing sitelinks for the archetypal hunt outcome snippet in one browser and for the identical query, it not showing the sitelinks.
• Google Business Profiles Review Appeals Are Delayed Again
  Google Business Profiles assessment appeals are delayed again. Dan Boguslavsky from the Google squad posted concerning the postpone final Friday saying, "Due to elevated quantity of assessment connected appeals, handling times are currently extended."
• Google Search Tests Removing Horizontal Rule Line Under Tabs
  Google is evaluation removing the HR, thematic row interrupt or horizontal regulation line, that is established under the hunt tabs under the hunt box in the hunt results page.
• Latin Heritage Month at Google alongside Bachata Training
  Here is a photo from the GooglePlex, the chief Google agency in Mountain View, California, of a ritual of Latin Heritage Month at Google. You can see, they equal have Bachata training.

Other Great Search Threads:

• Major Google Cloud outage in Europe correct now, Barry Schwartz on X
• ChatGPT's app downloads and monthly energetic users (MAUs) the two grew in Q3 compared to Q2 2026., Similarweb on X
• Well, TIL. I would have assumed they're equivalent, but they're NOT. This was a fun side-track. "?filter[]=123" ≠ "?filter%5B%5D=123" since in RFC 3986, Section 2.2 the characters brackets ([, ]) and affirmative signs (+) are defined as part of the reserved set., John Mueller on Bluesky

Search Engine Land Stories:

• Search Engine Land Awards 2026: Complete finalists list
• Google Ads AI Max spotted automatically enabled in several Ad Grants accounts
• Google Local Services Ads removes featured professionals
• Content pruning case study: Cutting 33% of pages that drove fair 3% of clicks
• How to measure Google Demand Gen against the correct goals
• Why the For You Page deserves SEO attention
• AI and local search: The new rules of visibility in 2027

Other Great Search Stories:

AI & LLMs

• 4 tips for styling outfits alongside Gemini, Google Blog
• Data: How AI Assistants Are Spending Real Money, Upstarts Media
• Four Gemini 4 Argon agents attack Minecraft without any individual help, The Decoder
• Google assistance pages are now AI summaries and chatbots, 9To5Google
• Microsoft unveils tools to detect and corral rogue AI agents, GeekWire
• New Feature: Grounding Snippet Ablation, DEJAN
• The Gender Gap in AI, Pew Research Center
• AI in the newsroom at Reuters, Reach, Independent and Metropolis, Press Gazette
• Advancing coding in low‑resource programming languages, OpenAI

Analytics

• Talking to your data: Introducing Conversational Analytics, Hallam

Industry & Business

• Anthropic Readies Model That Reads Users' Intentions Better, The Information
• How AI data centers are reshaping America's aging grid, CNBC
• OpenAI seeks to accelerate fundraising onward of Anthropic IPO, sources say, Reuters
• Supreme Court rejects Google difficulty to US patent agency assessment policy, Reuters
• West Memphis Energy Impact Fund awards $1.25M in grants, Google Blog
• What to Know About the Obscure Trust Looming Over Anthropic’s IPO, Wall Street Journal
• Anthropic IPO to Deliver Massive Windfall for Google's Eric Schmidt, Bloomberg
• Elon Musk says he'll provision a SpaceX portion to all kid in U.S., CNBC
• Google administrator dismisses European fears complete US control of AI, Financial Times (Sub)
• Ad Tech Briefing: Can flipping the ad auction wrest authority of ad tech from Google?, Digiday
• Forbes looks to Google AI aviator for insights, Digiday

Links & Content Marketing

• Influencer Content: Pros, Cons, Examples and Best Practices, TopRank Marketing

Local & Maps

• Local vs Brand-Level AI Visibility for MULOs, Street Fight
• Google Maps Bookings Have an Attribution Problem. Can Your Data Pipeline Explain Why?, HackerNoon

Other Search

• Google Home Speakers downloading enormous amounts of data, 9To5Google
• Wirecutter moves beyond affiliate income amid AI hunt shifts, Digiday
• The Verge restructures spectators squad to prepared for Google Zero, Digiday

PPC

• AI Max Launch Guide, Brainlabs
• Demand Gen Creative Best Practices, Google
• Microsoft promised small Windows 11 ads, but its wallpaper app acts akin adware, beginning Bing whenever you click your desktop, Windows Latest
• PPC Agency vs Freelancer vs In-House: Which Is Best?, Hop Skip Media
• Updates to Cryptocurrencies and connected products guideline (October 2026) United Arab Emirates, Google Advertising Policies Help
• Why I Think Platform Audits are Bad for Advertisers, Group Twenty Seven
• 9 Overlooked Marketing Budget Leaks (+How to Plug Them), WordStream
• "Partners" Setting for Performance Max, PPC News Feed

Search Features

• ChatGPT tests ample merchandise carousel alongside Shop now buttons, Search Engine Watch
• YouTube tests AI replies in searches, Social Media Today

SEO

• Who AI Overviews Cite for Marketing Searches, Barlo Digital
• 1: APIs for SEOs – What an API Actually Is and Why You Should Care, Search Engine World
• 3 Prompt Tracking Frameworks for AI Search [Free Skill], Orit Mutznik
• 434 Days Later - Are AI Search Platforms Like ChatGPT and Claude Still Unable To Render JavaScript In October 2026?, GSQI
• 7 AEO Testing Ideas to Boost Your Brand’s AI Search Visibility, seoClarity
• Beware of AI Content for SEO, Practical Ecommerce
• How AccuRanker Handles Poisoned SERPs, AccuRanker
• How to Build a Prompt Set Worth Tracking, Momentic
• SEO Beyond Traffic: Influence, Trust, and Business Results, Advanced Web Ranking
• I tested DeepSeek’s new hunt API. Here’s how it ranks and scores websites, Suganthan Mohanadasan
• What SEOs can study from social finding platforms, Oncrawl
• Google Search Traffic to Publishers Fell 40%: The Data, Technology
• A Cautionary Tale: One Site’s AI-Assisted SEO Crash, JumpFly

Feedback:

Have feedback on this regular recap; let me cognize on Twitter @rustybrick or @seroundtable, on Threads, Mastodon and Bluesky and you can prosecute us on Facebook and on Google News, add as a preferred origin on Google and create certain to subscribe to the YouTube channel, Apple Podcasts, Spotify, or fair communication us the old manner way.

20th October 2026

The personal keys of eight eMudhra intermediate CA certificates have been compromised. They sequence to roots trusted by the Mozilla, Microsoft, Apple and Chrome base programs and by many downstream rely stores.

How do we know?

To display that the keys are compromised, the first newsman Wayne signed the following communication alongside the personal key of all of the eight intermediate CAs and reported it to the Root Program Teams on the 17th of October:

We have a issue current - Wayne

proof.zip contains the message, and for all intermediate the certificate, its community key and a signature on the message. To verify alongside OpenSSL:

openssl x509 -in EM-DV-TLS-CA-G3B.crt.pem -noout -pubkey | diff - EM-DV-TLS-CA-G3B.pub.pem openssl dgst -sha384 -verify EM-DV-TLS-CA-G3B.pub.pem -signature EM-DV-TLS-CA-G3B.sig message.txt

What actions have been taken?

The base programs and many downstream rely stores have taken act to defend their users. The certificates have been blocked in Firefox and Chrome since the 17th of October, in Apple devices since the 19th and in Microsoft since the 20th.

The matter was responsibly disclosed to downstream rely stores on the 19th of October. Many have already released updates or are in the procedure of releasing updates.

What are the consequences?

An attacker alongside the personal key of any of the compromised intermediate CAs could impersonate any website or service.

This has already been remediated by Mozilla, Microsoft, Apple, and Chrome for their users through their tools for distributing revocation data specified as OneCRL, CRLite and CRLSets.

The CA has additionally revoked the compromised intermediate certificates. However, many another clients do not consume revocation data and necessitate application updates to justify they no longer rely the compromised intermediates.

Does your client motionless rely the compromised intermediates?

What actions can users take?

Users should update their browsers and functioning systems to the latest versions as shortly as possible.

What concerning developer application and packages?

Add additional at github.com/galadran/we-have-a-problem.com.

Are there workarounds for Linux?

Until a allocation ships an updated ca-certificates package, expert users can distrust the affected roots in the scheme rely store. This is NOT recommended for average users.

On Debian and Ubuntu, run as root:

sed -i \ -e 's|^mozilla/emSign_ECC_Root_CA_-_G3.crt|!&|' \ -e 's|^mozilla/Comodo_AAA_Services_root.crt|!&|' \ /etc/ca-certificates.conf && update-ca-certificates

On Alpine, run as root:

apk add ca-certificates && sed -i -e 's|^mozilla/emSign_ECC_Root_CA_-_G3.crt|!&|' \ /etc/ca-certificates.conf && update-ca-certificates

On Fedora, RHEL, CentOS Stream, Rocky Linux, AlmaLinux and Amazon Linux 2023, run as root:

d=/etc/pki/ca-trust/source/blocklist; [ -d $d ] || d=/etc/pki/ca-trust/source/blacklist trust extract --overwrite --format=pem-bundle \ --filter='pkcs11:object=Comodo%20AAA%20Services%20root;type=cert' \ $d/Comodo_AAA_Services_root.pem && trust extract --overwrite --format=pem-bundle \ --filter='pkcs11:object=emSign%20ECC%20Root%20CA%20-%20G3;type=cert' \ $d/emSign_ECC_Root_CA_-_G3.pem && update-ca-trust

On openSUSE and SLES, run as root:

d=/etc/pki/trust/blocklist; [ -d $d ] || d=/etc/pki/trust/blacklist trust extract --format=pem-bundle \ --filter='pkcs11:object=Comodo%20AAA%20Services%20root;type=cert' \ $d/Comodo_AAA_Services_root.pem && trust extract --format=pem-bundle \ --filter='pkcs11:object=emSign%20ECC%20Root%20CA%20-%20G3;type=cert' \ $d/emSign_ECC_Root_CA_-_G3.pem && update-ca-certificates

On Arch Linux, run as root:

trust extract --format=pem-bundle \ --filter='pkcs11:object=emSign%20ECC%20Root%20CA%20-%20G3;type=cert' \ /etc/ca-certificates/trust-source/blocklist/emSign_ECC_Root_CA_-_G3.pem && update-ca-trust

On NixOS, add to your configuration:

security.pki.caCertificateBlacklist = [ "Comodo AAA Services root" "emSign ECC Root CA - G3" "emSign Root CA - C1" "emSign ECC Root CA - C3" ];

What actions can rely shop operators take?

Please see this thread in Mozilla's dev-security-policy forum.

Which intermediates were compromised?

Fingerprints, SPKI hashes, serial numbers and CCADB document IDs for the eight intermediates, including the Sectigo cross-signs, are in affected-certificates.json.

Site published by Dennis Jackson. The origin is on GitHub and PRs are welcome.

France is experiencing one of its largest riots and protests in years.

What began as peaceful demonstrations complete academy conditions culminated in nationwide cost-of-living protests and, subsequently, riots.

French Prime Minister Sébastien Lecornu stated Tuesday that curfews imposed on Monday contributed to a calm night, although additional protests are planned, according to Reuters.

The riots and protests echo many in France's lengthy former of mass demonstrations. From nationwide strikes to pupil demonstrations, multiple have brought the nation to a standstill, in several cases prompting France's leaders to province a province of emergency.

Take a appearance at several of France's biggest and most impactful protests and riots complete the former 100 years.

You power have already noticed that 2026 seems to be a bit particular twelvemonth for Rust compiler. It seems akin there's fair a lot of material going on. Some things were already announced since I started penning this, but there's motionless a bunch additional that's not as visible. I'll portion several things that I personally discover interesting.

To explain a bit of context, what happened this twelvemonth is that multiple distinct initiatives are reaching final steps at the identical time. In another words, 2026 is not that particular alongside the amount of activity being done, but it's a twelvemonth whenever we see multiple long-term investments starting to pay dividends.

Next solver 🔗

Probably the biggest item is the next generation trait solver. This is a reimplementation of a big part of the category system, and it has been in the plant for a extremely lengthy period - Almost 10 years in assorted forms. It fixes a bunch of soundness bugs and unblocks a lot of features and fixes for long-standing issues.

It's uncomplicated to understate how big of a agreement this is for the compiler. This activity resolves a important part of specialized debt that a lot of compiler developers dreamed concerning for years. It additionally frees up a bunch of group alongside a caller and profound understanding of the category scheme to activity on new things. The queue of things that get unblocked includes many average ache points of the language, equal things that power appear benign or unrelated. It contains solutions to big problems in async Rust, or assorted restrictions of impl Trait.

Polonius 🔗

Another big item is Polonius, a new get checker implementation, lengthy period in the making as well. It enables additional code to compile and unblocks multiple connected features - including (hopefully one day) inner references. The compiler effect of this is not as big as alongside the new solver, but it's motionless a beautiful big deal.

Perf 🔗

My chief area of involvement is compiler performance, and current we have fairly a few things going on. After 1-2 years of a kind of stagnation (at smallest in conditions of results), we abruptly have a lot of things going on at once. So much so that I have a difficult period remembering everything, but from the top of my head:

Parallel frontend is near to stabilization 🔗

Very old undertaking that was put a few years on hiatus alongside many unclear blockers. The betterment restarted again a few years ago alongside a new contributor @SparrowLi, and complete period a figure of another group contributed to the effort.

Over the years, this turned out to be a enormous can of worms. I get the emotion that nearly nobody is really blessed alongside the design. However, there doesn't appear to be a improved substitute for the foreseeable future, and parallel frontend is extremely desirable, so the resolution ended up being fair grinding through a figure of annoying and hairy problems until there's nothing left.

The current project goal is driven by @petrochenkov and is getting near to stabilization.

LLVM is getting faster 🔗

LLVM 23 was unambiguous and unexpectedly ample affirmative alter in performance. For a lengthy time, LLVM upgrades were not particularly awesome for rustc performance. This changed following LLVM 10 upgrade, which introduced a enormous 10% regression, and @nikic, current guide developer of LLVM, called it out in his blog post, Make LLVM accelerated again. In the article he additionally introduced a scheme for tracking LLVM achievement complete time, inspired by the one we use for rustc.

Since then, LLVM started catching achievement regressions earlier, and results for upgrades in rustc went from "less bad", to "somewhat mixed", to "mostly affirmative alongside caveats." The final one of those was LLVM 22, which was green on icount benchmarks, but nearly universally red on partition time.

LLVM 23 is beautiful much entirely positive. I don't prosecute LLVM betterment that much, but my understanding is that this is since there's now additional activity on really optimizing it, as opposed to operating on features without trying to regress performance. These days the improvements arrive the two from new optimizations (those assistance optimize the compiler during bootstrap) and from LLVM itself getting faster.

Lot perf improvements landing (micro-optimizations) 🔗

Compiler achievement has been on a dependable streak of improvements in the former few months. There's likely no sole clarification for it, fair a blend of new contributors coming in, old contributors getting to do additional perf work, and tooling improvements blended alongside architectural cleanups unlocking new opportunities.

With additional group operating in this area, I've noticed a lot of cross-pollination, where a certain idea would circle about a few people's minds, as group get inspired by all other's PRs and try connected things.

I additionally awareness akin we got a lot improved at managing regressions - triaging and addressing them. This is partially a tooling investment, but additionally a lot concerning processes and social structures. A important betterment current is the association between tree ops and perf triage, represented notably by @JonathanBrouwer.

This method that group who oversee merges frequently immediately triage their achievement impact. This is crucial since it shrinks the reply time, but the association is helpful for another reasons as well. The perf effect informs how you collection PRs into rollups, for example. Turns out that Conway's law is motionless a law.

I additionally greatly bask assisting group interpreting the measure results and diagnose regressions. I frequently discover that equal fair a few sentences from person who's been looking at the results all day for many years go a lengthy way towards getting the regression addressed.

All in all, I awareness akin the compile period concerns are unified into the betterment improved than they have always been.

Move elimination 🔗

This apparently came out of nowhere before this year, and it's fairly interesting. @Amanieu proposed a MIR optimization pass that allows the compiler to eliminate copies that LLVM has difficulty optimizing. It speeds up the two compile period and runtime.

This is one of those passes that makes awareness to execute in MIR alternatively of LLVM, since the Rust part of the compiler has improved data concerning whether it's valid to use specifically for Rust. Even additional so since it really requires changing the MIR semantics a bit.

It matters for Rust in particular since Rust typically generates additional moves than C(++), which is the chief LLVM target.

Polymorphization 🔗

This one is particularly near to my bosom since I've been following the efforts for a extremely lengthy time. Polymorphization is among the most impactful compiler achievement optimizations we could always do, but it's unfortunately really tricky to implement.

This would be the third test I'm conscious of. This period it's slightly distinct from the former ones, and it's inspired by a akin scheme in Swift.

The difference is that the first polymorphization aims to lone evade copy or redundant monomorphizations, so it's purely a compile period optimization alongside no runtime impact, during the Swift-style one aims to polymorphize everything and continue about layouts of generic parameters as arguments. This volition have a runtime cost, so it'll be item you can tweak alongside compiler flags.

If my understanding is motionless up to date, next-solver volition additionally allow polymorphization in the earlier intended way. Either way, the two options run into the identical problems, so the activity is helpful for both. It's additionally imaginable that the two options arrive out of this identical effort. Either way, this is motionless fair an test alongside a bunch of problems to solve, so we'll have to delay to see how it turns out. The project goal has been projected and driven by @camelid.

cargo inspect and cargo build sharing cache 🔗

@blyxyas is operating on a project goal, which volition allow cargo to portion artifacts between cargo inspect and cargo build. The goal is really additional general, but this is likely its most recognizable outcome. This is item we wanted for ages, so it's really chill to see advancement on this front.

This was already announced, and it volition shrink the mark directory size by 5-30%, depending on the workload.

New cargo build-dir layout 🔗

Already announced as well, this is another project that has been in the plant for fairly several time. As alongside the another things above, this is important inner restructuring that unlocks another things - namely granular locking of the mark directory and cross-workspace caching.

no-link/link-only 🔗

@bjorn3 has been operating on fixing assistance for these two flags, which allow pipelining of build scripts and proc macros. As you can see in the proposal, this is yet another row of activity that boils downward to fixing a laundry catalog of inner issues and architectural problems until abruptly a big item is unlocked.

Architecture 🔗

There have been a figure of initiatives in the compiler architecture. I'll citation a few, fair to (once again) underscore the item that big things don't happen in big-bang projects coming out of nowhere, but fairly as consequences of sustained long-term investments into a fit system.

Two years ago, @jdonszelmann started the effort to unify and cleanup how attributes are represented and checked in the compiler. Just a few days ago, the final remaining trait was ported to the new system. This considerably improves how attributes are checked and unblocks improvements to diagnostics and another things.

Earlier this year, @Zalathar and @nnethercote cleaned up the implementation of rustc's query system. This improved achievement but additional importantly, made the scheme easier to understand, which was frequently a blocker for making improvements to it. The scheme is motionless a beautiful scary part of the codebase, but this is a big stage forward.

There's really additional architectural activity in this area, @oli-obk has been operating on architectural groundwork for expansion-time evaluation, and there's been a lot of activity by @cjgilot, @petrochenkov and another group I'm forgetting (sorry) on queries and incremental in general. Similarly, a lot of activity happened to allow const generics to advancement further. A average theme of these efforts is that they allow the compiler to use its capabilities in additional contexts anywhere it was earlier limited, often since of strict ordering of several compilation phases.

Project goals and funding 🔗

There's fairly a bit of meta material as well. Rust project has been experimenting alongside a new organizational example called "project goals."

It went through multiple iterations alongside assorted changes and experiments, but it seems that the scheme has eventually reached several optimal dependable state, and we see the benefits perform out. I think you can plainly see that from the catalog above.

We now have a Fast Builds roadmap and multiple perf connected project goals. That's beautiful exciting.

There are additionally multiple new developments in funding. One is explicitly attached to project goals, we additionally have a new "Maintainers in Residence" program, and a new backing squad was established as well.

One additionally can't assistance but notice how many results came out of Hexcat employing a bunch of group in the former year.

...and me 🔗

And lastly, 2026 is additionally an breathtaking twelvemonth for me. After a few years of observing from the sidelines and eventually joining the perf triage, I decided to commencement operating on the Rust project additional seriously.

Earlier this year, it became apparent that I need to decide what to activity on next. My current activity is gradually winding downward and turning into maintenance, and I additionally started to awareness a bit burnt out on web-based work. For fairly several time, I've been emotion the desire to come back to item additional specialized and challenging.

I was considering a few options, but slightly unable to decide between them. To use the term from Marie Kondo, nothing really felt akin it "sparks joy." After several exhausting events and emotion a bit downward from all of this on one evening, I received an invitation to Rust All Hands. This was a pleasant surprise. I signed up for it before that year, but I didn't really anticipate much since I didn't cognize the likelihood of being invited. I took this as a kind of sign from the cosmos or item and booked the trip.

The cognition was overwhelmingly positive. I have to say that this was among the most breathtaking events I attended in a lengthy time. It reminded me that there's this big part of my existence that I don't get to portion alongside anybody nearly ever, particularly in genuine life. It seems so uncomplicated to ignore that until you really cognition it again.

Yes, sure, I can conversation concerning several inquisitive aspects of the Rust compiler alongside my friends, but it's a entire another flat to conversation concerning it alongside group who really activity on it and comprehend what you conversation concerning on a profound level. It was really nice to encounter group I cognize from their activity and associate the discussions concerning the betterment of the language.

Long narrative short, it became apparent that this is it, this is what I desire to do. I was thinking concerning it before, but I conjecture I needed several powerful "spark of joy" instant to halt doubting my feelings and power me to create a decision.

How to get a job on Rust? 🔗

Now, of course, the inquiry is how to really do it. As you may cognize (and I slightly hinted above), it's not exactly straightforward to discover a job on the project. There's no "Rust inc." business you can dispatch a CV to. There's a fractured and varied area of possibilities anywhere everybody finds their own way somehow.

It's getting additional approachable alongside those new programs, but I motionless anticipate this to obtain several time. Part of it depends on connections and trust, and those are built complete time. I don't have to hurry this, so I'll keep operating until I fig item out.

I've accepted to activity on the target directory size decrease project goal if there is adequate backing for that. I've additionally applied for MiR program, but I don't think that'll be accessible shortly since the finances are constricted and there are additional crucial areas that need this particular funding.

btw. I additionally opened GitHub sponsors, so awareness liberated to associate if you desire to assistance several compiler achievement activity ;)

Conclusion 🔗

There's so much happening in the project that I awareness akin it's really challenging to do it justice. I already awareness akin I remaining out a ton of engaging work, but I have to halt somewhere. I anticipation that equal this incomplete overview has been interesting.

I think I should additionally say that not everything has been positive. The commencement of the twelvemonth was overshadowed by a bunch of group losing backing and heated discussions about AI policy. Just a few days before All Hands, person posted the guideline outline to social media, and our small moderation squad and another group spent a stressful weekend trying to bounds the damage.

In ray of that, I have a emotion that All Hands was a turning item anywhere everybody could recharge, refocus, and obtain the affirmative energy rear to the project. I certainly awareness that, and I anticipation I'm not alone.

Read next

Read next

On Friday Oct 2, 09:35am, 333 infected exit nodes started a coordinated run to obstruct SSH connections and collect as much unencrypted data as possible.

To provision you a awareness of scale, all of Tor has about 3000 exit relays, so approximately 10% were under their control.

The attackers had gained admission to the servers two months earlier, in August, and quietly deployed their Ebury 1.8.3 payload (an OpenSSH backdoor and credential stealer for Linux).

The Attack

The assault appears to have had two chief goals:

1. Gather as much unencrypted communication traffic as possible
2. Intercept SSH connections (MITM)

By blocking certain ports, they made their exit nodes grip lone unencrypted communication traffic. An engaging writeup by among the victims (a seasoned Tor operator) goes into awesome item concerning that: lists.torproject.org/mailman3

In this article I'll concentration on the second attack, the SSH MITM. If you happen to get a circuit that exits complete one of those 333 infected exit nodes, you won't notice item at first. Encrypted web traffic is forwarded as usual, but if you attempt an SSH association complete Port 22, you're unknowingly redirected to one of 12 SSH interception servers.

That's exactly what happened to me on Friday morning. My SSH association got redirected, and I was greeted alongside this warning:

 @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY! Someone could be eavesdropping on you correct now (man-in-the-middle attack)! It is additionally imaginable that a presenter key has fair been changed. The fingerprint for the ED25519 key sent by the distant presenter is SHA256:6baCZCPsl+AfQuujUS81fMEE/C7UeJ+AwjrImqmDB3E. Please communication your scheme administrator. 

But if you disregard the alert and go onward alongside the login, the attacker does three things:

1. Steals your password
2. Opens a association to your server and observes all command you category (MITM)
3. Opens a second association to your server and infects it alongside Ebury

Getting them taken down

On Friday evening I contacted the Tor Project's network health team alongside my findings. They confirmed this was item new and got to activity by contacting the affected relay operators.

"We've not seen an assault akin that before."
- Tor Network Health Team

1. Fri Oct 2: Interception started.
2. Sun Oct 4: The Tor network health squad made an notice to the operators, who began shutting their exit nodes down.
3. Sun Oct 4: The relays were marked BadExit, so clients would no longer use them to exit traffic.
4. Mon Oct 5: The attackers restarted many of the relays, but since they were already flagged they could lone assist as center relays.
5. Mon Oct 5: All infected servers were close down, partially by the operators and partially by the attackers.

In their announcement, the health squad described the pattern:

"It seems the attacker is gaining admission to Linux based hosts and whenever these machines are operating non-exits they are editing the torrc document and turning them into exits to be capable to transport out the SSH attack."
- Tor Network Health in the announcement

You can see the effect of those 333 exit nodes being close down. On metrics.torproject.org a apparent dip is apparent on October 4th and has not restored since.

Consider operating a relay: community.torproject.org/relay/setup/

The specialized part: how I established them

In this part I'll go into item concerning how I established all the infected exit nodes.

Using exitmap, I built a uncomplicated manuscript that did the following: it pinned an exit node, afterward opened an SSH association from my server A to my server B.

• Server A checked whether it received the accurate SSH fingerprint from server B.
• Server B checked whether the association came from the pinned exit node or from among the 12 SSH interception servers.

I ran the manuscript against all sole among the ~3000 exit relays. Around a dozen served a counterfeit fingerprint, and complete 300 didn't obstruct item but redirected through those identical interception servers. Redirecting solitary was adequate to verify the exit was infected.

In several additional inspection I used sshesame as a honeypot. Tricking the MITM into logging into the honeypot showed that they used paramiko (a Python SSH library) and additionally how they attempted to instal Ebury using Perl.

 > echo "U=$(id -u) S=$(command -v sudo >/dev/null 2>&1 && (sudo -n true 2>/dev/null && echo nopass || echo maybe) || echo none)" > sudo attack -c 'echo <base64> | base64 -d | perl' 

Checking for permissions first, afterward executing a base64-encoded command.

Open Questions

The biggest inquiry is motionless how they got into all those servers in the archetypal place. One theory is that the hosting business itself was hacked (discussed here: lists.torproject.org). But that's fair a theory floating around. In truth, no one really knows.

Another is who's rearward it. The use of Ebury and the broad gathering of unencrypted data item to a financially motivated infringement group. Though this too is fair speculation.

"Given how many servers had Ebury between 2009 and 2023 (400 000!) there are most apt another compromised Tor relays out there."
- Marc-Etienne M. Léveillé (lists.torproject.org)

I additionally doubtful they deliberately launched their assault on a Friday, expecting that no one would desire to ruin their weekend by responding. All the additional credit to the Tor Team for acting so quickly!

Takeaway

The instruction is the identical as always: additional safety is a worthwhile investment. Disable password authentication in favor of ssh keys. I for one am going to buy myself several hardware keys today. :)

"At the end of the day, relays/bridges need to be treated as extremely targeted manufacturing machines."
- George (lists.torproject.org)

LG’s OLED TVs are extensively hailed as several of the top-rated on the market, and during their cost tags can ascend alongside the fancier models, critics and reviewers concur that among the brand’s most popular, best-performing OLEDs is the LG OLED Evo C6. The 55-inch example is downward to a lowest-ever cost of $999.99 (originally $1,399.99), preservation shoppers $400 on the notable TV. The agreement additionally comes alongside 90 liberated days of Amazon Music, upping the value equal more.

LG 55 inch Class LG OLED Evo

$999.99 at Amazon

$1,399.99 Save $400.00

Get Deal

Get Deal

$999.99 at Amazon

$1,399.99 Save $400.00

Brighter than its predecessor, the OLED evo C5 has a highest brightness of 1,522 nits alongside a 10% pale field, according to PCMag. The outlet praises its gorgeous image quality, outstanding contrast, and well-balanced colors. It has ideal dreary levels alongside no ray bloom and uses LG’s webOS astute TV platform, akin most current LG TVs. It’s additionally strengthened by features akin AI conversation enhancement, which helps enhance the inner 2.2-channel audio system.

It has a native 120Hz refresh rate, alongside VRR up to 165Hz, and supports AMD FreeSync Premium and Nvidia G-Sync, making it a firm choice for gamers. It additionally has an input lag of 4.6 milliseconds alongside a 1080p120 indication in Game mode. If you’re using it chiefly for gaming, though, the faster Samsung S95H may be additional appealing.

Ultimately, if vibrant, bright, and exact 4K OLED image norm is your precedence but you don’t desire to expend the $3,000 that several competitors alongside akin features cost, you won’t discover much improved than the 55-inch LG OLED Evo C6 at this cost point—as lengthy as you’re OK alongside the deficiency of Wi-Fi 6.

Read next

Companies without the inner resources or prosperity to build a dedicated hunt division motionless need to cognize what options be for operating AEO without a ample team. Answer Engine Optimization is no longer optional for companies that depend on hunt to create leads and revenue. AI Overviews now appear at the top of hunt results before a sole integrated listing — and sometimes complete paid ads.

Three paths be for operating AEO without a ample team. The archetypal is a DIY workflow built about liberated or low-cost tools. The second is a complete application resolution akin HubSpot AEO that centralizes tracking and recommendations. The third is agency assistance for teams that desire the activity handled externally.

The correct way depends on how much period the squad can dedicate all week, what prosperity is available, and how consistently measure can be turned into action. This part covers all path, walks through a minimum viable workflow for getting started, and provides starter prompts for construction a repeatable tracking system.

Table of Contents

• What options be for operating AEO without a ample squad whenever deciding what to do now?
• What options be for operating AEO without a ample squad whenever choosing between DIY, software, and agency support?
• What options be for operating AEO without a ample squad to get a accelerated baseline?
• What options be for operating AEO without a ample squad to build a repeatable workflow?
• Frequently Asked Questions About Running AEO With a Lean Team
• Choosing the Right Path Forward for Running AEO Without a Large Team

What options be for operating AEO without a ample squad whenever deciding what to do now?

Answer Engine Optimization requires measurement, immediate tracking, and satisfied updates. All three can commencement in a sole week without a dedicated specialist.

Four foundational elements decide how fine AEO runs on a lean team. Each one is covered below, alongside alongside how AI tools can grip the implementation activity without adding headcount.

1. Conduct a baseline visibility check.

The baseline visibility inspect comes first. It establishes anywhere the brand currently stands in AI-generated answers before any scheme activity begins. A helpful baseline covers three things: whether the brand is mentioned at all, how it is described whenever it appears, and which competitors display up in its place. Without this starting point, teams have no way to measure whether afterward efforts really work.

Two affordable approaches be for getting a baseline:

1. Manually evaluation a handful of prompts throughout center AI hunt platforms akin ChatGPT, Google AI Overviews, and Perplexity, afterward record the results.
2. Using AI Search Grader, which returns a visibility snapshot in minutes without manual immediate evaluation throughout all platform.

AI Search Grader is built for marketers who need a starting item without committing period or prosperity upfront. AI Search Grader requires no setup, no integration, and no dedicated tool spend. For a lean team, the value is speed — a marketer gets an first peruse on brand visibility accelerated adequate to fold into an existing workday, afterward uses that starting item to decide what comes next.

AI Search Grader organizes brand achievement into five categories.

• Sentiment: The general spirit AI models use whenever describing the brand, evaluated throughout broad tone, how that spirit shifts throughout topics, and the credibility of sources shaping that characterization.
• Presence Quality: How substantively AI platforms conversation the brand, the norm of sources feeding that understanding, and the general richness of accessible data.
• Brand Recognition: How extensively the brand is recognized inside AI training data.
• Share of Voice: How frequently the brand is mentioned related to competitors inside the identical set of responses.
• Market Position: How the brand is positioned competitively compared to others in its category.

AI Search Grader gives marketers a one-time visibility snapshot. HubSpot AEO supports ongoing tracking, which makes AI Search Grader a helpful starting item for teams not yet prepared to commit to a complete monitoring workflow. To get the most complete picture, combining AI Search Grader alongside a circular of manual prompts covers the two the organized mark and the raw hunt behavior.

2. Build a starter immediate set.

A starter immediate set should contain 15 to 20 prompts, organized into four categories.

• Branded prompts: Direct questions concerning the business by name, evaluation whether the brand shows up at all whenever person asks concerning it specifically
• Category prompts: Broader questions concerning the merchandise or assistance category, evaluation whether the brand appears whenever a buyer hasn’t named it yet
• Comparison prompts: Questions that pit the brand against named competitors, evaluation portion of sound and how favorably the brand is positioned
• Objection-style prompts: Questions that exterior hesitations or concerns a buyer power have, evaluation whether the brand’s satisfied addresses genuine objections or leaves the gap open for a competitor to fill.

Mixing all four matters since buyers rarely commencement alongside a brand name. Non-brand searches are anywhere AEO needs to concentration its efforts. Over 30% of Gen Zers discover data through chatbots or AI, and 47% of today’s marketers use AI for research, according to HubSpot’s AI Trends for Marketers report. A immediate set built entirely from tagged questions volition display powerful visibility that does not indicate how the brand really performs whenever a buyer is comparing options.

Here are several examples of prompts and the categories they pertain to.

One crucial caveat: AI hunt results are personalized. Results change according to a user’s location, document history, and device, so what one marketer sees whenever evaluation a immediate volition not continually equivalent what an genuine buyer sees. That variability is value factoring in whenever interpreting baseline results.

Phrasing additionally matters additional in AI hunt than in traditional search. Two closely connected prompts — “best CRM for small teams” and “best CRM for a five-person revenue team” — can come back distinct answers. Answer engines react to the particular phrasing of a inquiry fairly than matching intent against a broader set of connected conditions the way traditional hunt does.

Because phrasing matters additional in AI hunt than in traditional search, a manual immediate set, nevertheless fine built, is a snapshot fairly than a completely dependable measure, and it volition not capture all assortment a genuine buyer power search. Tracking is improved managed alongside tools, but we’ll get onto that later.

Pro tip: Once the set is locked in and the archetypal visibility test has been run, it becomes the fixed benchmark the squad tracks complete time. Keeping the immediate set accordant from week to week is what makes comparisons meaningful.

3. Schedule a weekly review.

A starter immediate set lone earns its keep if person really looks at the results. Regular assessment is what turns visibility data into next steps for the promotion team.

Three things are value observing for in all review:

1. New competitors appearing in prompts anywhere they hadn’t shown up before, which can indication a competitor’s latest satisfied push
2. Changes in how the brand is described, since spirit and framing can change equal whenever the brand is motionless being mentioned
3. Prompts anywhere the brand has dropped out entirely, which is frequently the clearest indication that a particular leaf or part of satisfied needs attention

A weekly assessment does not have to average manually re-checking everything. Teams using AI tools can speed up workflows akin this and shrink reporting time significantly.

4. Close the iteration alongside satisfied updates.

Tracking AEO achievement without acting on it volition not move visibility. Answer engines diagram from sources beyond a brand’s website, including third-party articles, forums, reviews, and social content. An ongoing satisfied scheme is what turns tracking data into genuine visibility gains.

Recency matters additional than most teams expect. Content published inside the final five years accounts for 94% of LLM crawler hits, according to a study from Seer Interactive, alongside most of that portion going to satisfied published in fair the former year. An old blog article that formerly classified fine volition not keep earning citations on position alone. When the data, examples, or data inner it go stale, answer engines appearance elsewhere for item additional current to cite.

Source

Because recency matters additional than most teams expect, publishing and updating are two separate, ongoing activities.

• Build an update cycle, not fair a publishing calendar. Fast-moving topics need refreshing frequently. More stable, evergreen topics can be reviewed small often. Either way, updates need a scheduled date fairly than happening lone whenever a page’s achievement slips.
• Repackage powerful satisfied into new formats. A high-performing part does not need to be replaced by item new. It can rotate into a abbreviated video, a LinkedIn carousel, or an expanded guide, and that new asset can be added rear into the first leaf to fortify it.

Recency does not transport equal importance throughout all industry, and that difference should form how frequently an update sequence runs. The identical Seer Interactive study established three distinct patterns.

• Financial services shows an extreme recency bias, alongside AI bot action concentrated nearly entirely in satisfied published inside the final one to two years, driven by how quickly topics akin payroll, tax, and HR regulations change.
• Travel satisfied shows a akin form alongside a slightly wider window. Ninety-two percent of hits district on satisfied from the final three years, since evergreen formats akin “best places to journey in July” lean to clasp relevance beyond a sole publish date.
• Energy content behaves differently, alongside a much longer rack existence for evergreen instructional topics akin “what is ecological sustainability,” since this benevolent of satisfied does not go old the way time-sensitive topics do.

A sole update sequence volition not assist all brand equally. The correct cadence depends on how quickly the topics a brand covers lean to change.

Pro tip: Content updates made for AEO do not need to happen in isolation from existing SEO work. Marketing Hub SEO software surfaces prioritized recommendations to fix on-site issues, identifies topic clusters to build hunt authority, and integrates keyword data alongside Google Search Console. Strengthening topic authority through this benevolent of tool supports the identical satisfied answer engines are additional apt to cite, since the two traditional hunt and AI hunt reward clear, well-structured, authoritative content.

What options be for operating AEO without a ample squad whenever choosing between DIY, software, and agency support?

Lean promotion teams can run Answer Engine Optimization alongside one to three people, provided they choose the correct setup, from DIY, software, and/or agency support. The correct choice depends on how effort, cost, control, and speed measure against all other.

The difference below covers effort, cost, control, and speed for all path.

DIY

DIY expenses the smallest in dollars but the most in time. A marketer manually evaluation prompts, logging results in a spreadsheet, and cross-referencing SEO data has complete authority complete the process. The method scales poorly former a fistful of prompts and tends to autumn distinct the archetypal period the squad gets busy. It plant finest as a starting point, not a long-term system.

The learning curve is steeper than most teams expect. AEO is a newer site than SEO, the industry is complete of conflicting advice, and there is no equal decade of established playbooks to lean on. A marketer starting from scratch needs to investigation how answer engines work, fig out which platforms matter most for the audience, and build a operating procedure before any tracking equal begins.

Agency Support

Using an agency removes the period burden but comes alongside small day-to-day authority and a higher cost point. External teams can run AEO monitoring and satisfied recommendations without pulling inner bandwidth, which suits companies alongside prosperity but no inner capacity.

The tradeoff is speed. Insights or satisfied assistance frequently has to continue through the inner squad before activity can proceed. A nuance an in-house marketer would capture immediately can obtain a complete reporting sequence to exterior and accurate whenever routed through an external agency partner.

Cost is the another factor. Agency retainers for AEO activity change widely, and pricing models are motionless inconsistent throughout providers since the site is comparatively new. Agency assistance tends to create the most awareness for teams alongside the prosperity to completely outsource AEO — not for teams looking to supplement constricted inner capacity, since the disbursal lone pays off whenever there is adequate expend to create complete outsourcing worthwhile.

Pro tip: The strongest agency candidates are those alongside a hunt promotion background, specified as an SEO agency that has expanded into AEO. The two disciplines portion adequate overlap in satisfied quality, organized data, and authority signals that an agency already acquainted alongside the brand’s SEO achievement has a meaningful caput start.

Software

Software sits between the two another paths and plant finest for most lean teams. For a squad weighing options, application is anywhere an AEO scheme pays off fastest.

HubSpot AEO helps marketers track brand visibility, competitor presence, citations, and recommendations throughout answer engines. It centralizes the identical tracking activity a DIY spreadsheet would require, without the manual overhead or the agency cost tag.

A one-person promotion squad benefits from this setup additional than a larger squad does, since there is no one alternatively to assimilate the tracking activity if it slips. Prompts get set up formerly and run on a recurring basis fairly than being rebuilt by hand all week. When results arrive in, they contain a particular advice — a leaf to update or a gap to near — so the marketer is not remaining interpreting raw data without a apparent next step.

For a marketer covering strategy, content, and reporting alone, automating immediate setup and providing particular recommendations is the difference between AEO being a sustainable part of the job and another project that quietly stops happening.

HubSpot AEO keeps measure and satisfied recommendations in one place, connected to the identical phase many teams already use for SEO. That makes AEO an expansion of existing workflows fairly than a distinct undertaking to maintain.

For teams weighing all three paths, the deciding inquiry is normally not which choice is finest in the abstract. It is which one the squad volition really keep up with. A consolidated application choice is normally the finest choice for teams that need ongoing measure without the complexity of an enterprise-grade scheme or the disbursal of complete agency support.

Pro tip: For teams construction out a lean promotion function additional broadly, see HubSpot’s guide to how to build the strongest small promotion team.

What options be for operating AEO without a ample squad to get a accelerated baseline?

A baseline visibility inspect can be completed in a sole sitting. Pick a fistful of prompts throughout ChatGPT, Google AI Overviews, and Perplexity, afterward note whether the brand shows up, how it is described, and which competitors appear instead. AI Search Grader handles a lot of that activity in a sole continue without manual prompt-by-prompt testing.

A one-time snapshot captures a sole moment. It answers the inquiry of anywhere the brand stands correct now, but not whether that stance is getting improved or worse. A brand could run a baseline, see a powerful result, and have no way of knowing whether it holds up a duration later.

Ongoing tracking closes that gap. The identical prompts run on a regular cadence, results logged complete time, and changes flagged as they happen fairly than discovered weeks later. Ongoing tracking is anywhere AEO tools for small teams rotate into value the investment. Manually repeating a baseline inspect all week is exactly the benevolent of project that stops happening formerly the squad gets busy.

HubSpot AEO is built for this ongoing layer. It tracks brand visibility, competitor presence, and citations on a recurring basis. AEO in Marketing Hub Pro and Enterprise adds CRM-informed immediate suggestions and a tighter way from recommendations to action, so tracking data becomes a particular next stage fairly than a study that sits unread.

HubSpot AEO Sensor adds a tier a brand-specific tracker cannot provision on its own. This liberated dashboard tracks AI answer motor volatility throughout ChatGPT, Gemini, and Perplexity. It helps teams inform the difference between a market-wide change and a gap particular to the brand’s own AEO work. The difference between a market-wide change and a gap particular to the brand’s AEO activity matters for a lean squad particularly — chasing an industry-wide autumn wastes period that could go toward fixing genuine brand-specific gaps.

Together, a accelerated baseline and ongoing tracking answer two distinct questions. One shows anywhere the brand stands today. The another shows whether that stance is holding, improving, or slipping. A lean squad does not need the two operating at complete measure from day one, but understanding the difference keeps a one-time snapshot from being mistaken for a tracking system.

What options be for operating AEO without a ample squad to build a repeatable workflow?

A accelerated baseline shows anywhere a brand stands today. Ongoing tracking shows whether that stance holds. What connects the two is a workflow — a fixed set of prompts tested the identical way all time, so results average item whenever compared week complete week.

The starter immediate set covered before introduced four immediate categories. Below are five example prompts for each, prepared to modify to any brand or industry.

5 Category Prompts to Test First

Category prompts test whether a brand shows up whenever a buyer hasn’t named it yet, which is frequently the clearest indication of how much activity AEO really needs.

1. What is the finest [product/service category] for [target audience]?
2. What tools assistance alongside [job to be done] for [industry]?
3. What should a [target audience] appearance for whenever choosing a [product/service category]?
4. What are the top [product/service category] options in [year]?
5. How does a [target audience] choose the correct [product/service category]?

5 Competitor Prompts to Monitor

Competitor prompts display portion of sound directly, and they lean to exterior gaps a brand’s own tagged prompts never will.

1. How does [brand name] difference to [competitor name]?
2. What’s the difference between [brand name] and [competitor name] for [use case]?
3. Which is improved for [use case], [brand name] or [competitor name]?
4. What do [competitor name] customers say concerning switching to [brand name]?
5. Is [competitor name] or [brand name] additional affordable for [target audience]?

5 Product and Use-Case Prompts

These prompts move beyond the category flat to particular scenarios a buyer power really hunt for, evaluation whether a brand’s satisfied maps to genuine use cases fairly than fair broad category terms.

1. Is [brand name] a fine choice for [specific use case]?
2. What’s the finest way to use [product/service category] for [specific use case]?
3. Can [brand name] assistance alongside [specific problem]?
4. What features should a [target audience] appearance for in [product/service category] for [use case]?
5. How does [brand name] grip [specific use case or workflow]?

5 Objection-Handling Prompts

Objection-style prompts test whether a brand’s satisfied addresses genuine hesitations or leaves the site open for a competitor’s satisfied to inhabit that gap instead.

1. Is [product/service category] value it for a small [industry] business?
2. What are the downsides of [brand name] or [product category]?
3. Is [brand name] too costly for [target audience]?
4. Does [product/service category] really activity for [use case], or is it overhyped?
5. What do group dislike concerning [brand name]?

Frequently Asked Questions About Running AEO With a Lean Team

Can I run AEO without purchasing a dedicated tool?

A lean squad can run a complete manual workflow using liberated tools akin AI Search Grader for a baseline and spreadsheet tracking for ongoing prompts. This method trades lesser upfront disbursal for higher ongoing period funding and lesser consistency, since manual tracking is normally the archetypal project to stumble formerly a marketer gets busy.

Free tools akin AI Search Grader can additionally shield the first baseline stage without any spend, which makes a no-tool commencement realistic for teams evaluation whether AEO is value deeper funding before committing to a complete AEO phase pilot.

How lengthy before I see changes in AI answers?

There’s no fixed timeline for how lengthy it takes to see changes in AI answers. Answer engines update at distinct rates depending on whether they drag from live web hunt or from training data. Weekly reviews matter additional than a sole before-and-after check, since gradual shifts are uncomplicated to young female without accordant tracking.

What’s the finest way to merge AEO alongside my existing SEO workflow?

SEO and AI workflows should run alongside all another fairly than vie for the identical satisfied resources. Strong SEO fundamentals akin topic authority and apparent satisfied construction lean to assistance AEO achievement too, so improving one frequently benefits the other.

When should I add an agency or external partner?

An agency makes the most awareness formerly there’s prosperity to completely outsource AEO fairly than fair supplement constricted inner capacity, since agency expenses lone pay off at that scale. An SEO agency that has expanded into AEO tends to be a stronger fit than one treating AEO as an entirely new site requiring a distinct retainer.

Do I need developer resources to get started?

No. The baseline visibility check, immediate tracking, and most satisfied updates can be handled by a marketer without any developer involvement.

Choosing the Right Path Forward for Running AEO Without a Large Team

Whatever way a squad chooses, HubSpot AEO and supporting liberated tools akin AI Search Grader and AI Search Sensor are value adding into the mix. A DIY workflow is lone as fine as the period accessible to run it consistently. HubSpot AEO removes that dependency by tracking brand visibility, competitor presence, and citations automatically. For teams operating alongside an agency, it provides an inner perspective of achievement between reporting cycles fairly than waiting on an external squad to exterior a change already apparent in the data.

For teams on Marketing Hub Pro or Enterprise, CRM-informed recommendations tie visibility data immediately to a next action. That connects visibility data immediately to act alternatively of creating another dashboard that goes unread.

Google seems to be removing the AI Overviews tag from several of the hunt results that are AI Overviews. The desktop type is missing the AI Overview label, during the mobile type has the AI Overview label.

Again, this is for several AI Overviews that display up at the top of the hunt results page. These are akin for cognition panels akin AI Overviews.

This was spotted by Glenn Gabe who posted concerning this on X, he said:

No AIO label? -> Very engaging to see AIOs for shows or movies and Google not provision the AIO label. Noticed that this morning. I amazement if we volition see additional AIOs without labeling. Stay tuned.

Here is what it looks akin on desktop:

But on mobile for the identical exact feature, the AI Overview tag is there at the top:

Don't get me wrong, there are plentifulness of AI Overviews being tagged as such:

I doubtful this is a bug but I can be incorrect - I reached out to Google.

No AIO label? -> Very engaging to see AIOs for shows or movies and Google not provision the AIO label. Noticed that this morning. I amazement if we volition see additional AIOs without labeling. Stay tuned. https://t.co/Xx7r99q5e8

— Glenn Gabe (@glenngabe) October 20, 2026

This may be why Semrush is showing a autumn in AI Overviews showing in Google Search, by the way:

@semrush reporting a autumn in how frequently AI Overviews display up, this have to be a bug in Semrush tracking - I see AIOs everyplace https://t.co/KdmFPHbpqs

— Barry Schwartz (@rustybrick) October 20, 2026

I should note, Google had missing AI labels before and it was a bug.

Forum conversation at X.

Last year’s Antigravity A1 is the finest beginner drone I’ve always tried. I put a companion who’d never flown into its virtual cockpit and didn’t concern one bit. The A1’s additionally nice for group who’d favor to think concerning flying fairly than filming, since you can reframe its 360-degree footage after.

But until today, that meant wearing the company’s FPV goggles and spending upwards of $1,599 on the complete set. Now, Antigravity is halving the cost of entry to $799 in the US alongside a new “Follow Me” kit that replaces the first headset and motion controller alongside a wristwatch and ring instead.

The idea is that Antigravity can be your robot cameraman, automatically flying, following, and filming you alongside a minimum of gear.

I took the new kit for multiple test drives this fall, and I’m carefully impressed.

Instead of powering on a headset and finding a harmless location to sit during you obstacle out the world, you can now drag a drone and a observe out of your bag, power them the two on, clasp a clasp to initiate the drone from your hand, afterward stroll or journey during the Antigravity A1 automatically films and follows you, dodging obstacles alongside the way.

You can equal motion your arm akin a magic wand to nudge the drone left, right, down, up, towards, or distant during it’s filming. You get a swipeable preview of what the drone sees on the watch’s touchscreen, and can choose assorted quickshots there or summon a brace of sliders (forward/backward, ascend/descend) to manually fly the A1 out of a jam. The circle doesn’t do item you can’t already do alongside the watch; it’s fair an additional clasp so you can initiate and reposition it one-handed.

As I discovered following three crashes, the A1 is not yet intelligent adequate to dodge everything or remain alongside me through thick and thin. I took it all about my neighborhood on a boot scooter, and you power desire to observe out about power lines, lean branches, or the vertical guy wires holding usefulness poles in place.

There’s additionally a lot of coarse edges I anticipation Antigravity volition fix, akin the sluggish cognition swiping about the touchscreen, or how it won’t district on my hand without switching rear to manual mode, or how I can’t get it to automatically commencement tracking and filming me — I continually have to discover myself on the observe screen, tap on myself, afterward tap another clasp to begin. I additionally ran into an matter anywhere it wouldn’t prosecute me formerly I crested a elevated hill, since it idea it was flying at too elevated an altitude.

Most of all, I anticipation Antigravity volition fig out how to keep the drone from drifting out into the street or complete a neighbor’s barrier whenever I inform it to prosecute correct behind. It’s far smaller than me, so anyplace I go, I awareness akin it should fit!

But as you’ll hopefully see in a video I publish afterward today, it’s not bad at following me through a compact suburban environment! None of my crashes so far have impaired the drone, and I akin how the observe automatically plays the final seconds of footage before a crash. It made it extremely uncomplicated to discover the drone after.

Antigravity’s new full-coverage propeller guards can additionally assistance in case of impact; I saw the drone bounce correct off one obstacle and keep flying. They’re included in the $799 set, although existing Antigravity A1 owners can buy the accessories too: it’s $340 for the observe and ring, and $40 for the guards, alongside a 20 percent discount for those who can demonstrate they already own the aircraft.

Antigravity’s A1 is benevolent of akin the folding Skydio I desire that business had made before it remaining consumers behind to assist industry instead. The self-flying Skydio 2 likewise had a few crashes in my tests and wouldn’t continually remain in its lane. But I’ve lengthy wanted a folding type I could effortlessly rod in a bag, and the Antigravity A1 seems akin the next finest thing.