Google is taking ads into AI Mode and expanding them to international markets. The pitch is simple: sponsored product listings get click-through rates comparable to organic results, and users, according to Google's own research, find them relevant. Search revenue grew 12% year over year in the third quarter, but the growth rate slowed, and Alphabet shares fell 8% after the report.
If you build anything that touches search traffic, this changes your funnel. AI Mode queries are three times longer than traditional searches, and one in five now involves voice, images, or documents. That means more intent-rich signals and more places where paid placements sit above your content. If your SEO plan assumes blue links, rethink it.
The numbers: total revenue hit $127.6 billion, up 25%. Google Services brought in $96.3 billion, up 11%. Google Cloud surged 103% to $30.7 billion, which is the number that should worry anyone betting on Search alone. Search queries grew at their fastest rate in five years, and visual searches now top 50 billion per month.
Watch the next two quarters. If Search growth stays in the low teens while AI Mode ad inventory scales, Google is trading organic clicks for monetized ones.
A hacker grabbed contact details and login records for more than 40,000 Homeland Security employees, and the data is now floating around on DDoSecrets. That's roughly one-fifth of the department's workforce, gone in one dump.
If you work in federal IT or security, this one hits close to home. The leak includes Active Directory group memberships, which tells an attacker who can reach what. Around 4,500 users sit in a group called Headspace_users, and one group references Penlink PLX, a tool for capturing real-time intelligence from calls, texts, and web activity. Anyone building internal tooling on Microsoft 365 should assume the map of access is now public.
More than half the records belong to U.S. Customs and Border Protection staff. ICE and its HSI unit account for much of the rest, with one HSI group exceeding 2,000 users nationally. TechCrunch verified part of the data by matching known employee names against an offline copy. The records appear to have been pulled around mid-August.
It's unclear whether the vulnerability has been patched, or whether DHS even knows about the theft yet. Okta said it's aware of the report and has seen no evidence of compromise on its side. Let's dive deeper…
In today's ContentBuffer update: