On Oct. 21, 2026 the PHP project released 8.5.12, 8.4.27, 8.3.36 and 8.2.35 to fix two critical bugs (CVE-2026-109618 and CVE-2026-109619) that can let an attacker run code on a server without logging in. The project says there are no complete workarounds and updating is the only safe choice.

PHP is the language under WordPress and most shared web hosting. If your website, quote form or client portal runs on WordPress, it runs on PHP. Take a 15-person plumbing company with a WordPress site on a managed host at about $30 a month. Most managed hosts push PHP updates themselves, so the fix is probably in and the owner needs one email to confirm the date. If the site sits on an old plan or a server a former agency set up, nobody may be applying updates. A compromised site can mean a hijacked request form, spam sent from your domain, or a site that goes dark. Care if you own or pay someone to run your site. Mostly ignore it if you use a hosted site builder where the vendor runs the servers.

The IRS lists Oct. 31 as the due date for the third-quarter Form 941, the quarterly payroll tax return. Oct. 31, 2026 is a Saturday, and the IRS says a return due on a weekend may be filed the next business day, which is Monday, Nov. 2.

This is routine, but a weekend due date is when owners assume someone else has it covered. If you run payroll through Gusto, QuickBooks Payroll, ADP or similar, the provider usually files the 941 for you, and the work is one check that it went out. If your bookkeeper or you file it by hand, the date matters. The IRS also says that if you deposited all of your taxes on time and in full, you get 10 more calendar days to file. Take a 20-person electrical contractor with a part-time bookkeeper. The 941 itself takes about an hour once payroll reports are final, and a late filing adds IRS penalties and notices on top of what you owe. Care if you have W-2 employees. Ignore it if you have only contractors and no payroll. The effect is small if your payroll provider files for you; it is a missed-deadline risk if nobody does.

On Oct. 28, 2026 Anthropic said smart reports, in-app surveys and pooled group budgets are generally available for Claude Enterprise. Reports show a team's work in Claude and what it costs, and pooled budgets let admins set one shared spend limit per team.

The announcement names Claude Enterprise only. It does not say Team, Pro or Max plans get these tools, and no price is stated, so a 10-to-50-person firm on Team seats should treat this as not for you yet. The pooled budget is the useful part for owners whose bill moves with usage, such as a 15-person agency with two developers on usage-based billing. A shared cap would stop one heavy month from running past what you planned. Owners paying a flat per-seat price have no usage bill for this to control. The effect for most readers is small.

On Oct. 28, 2026, Anthropic announced reporting tools that let managers see, for a chosen date range, what a team produced with Claude, what it cost and where its workflows broke down, built from internal analytics and employee surveys and including recommendations to improve results. It also announced pooled group budgets so teams can manage token spending, and says it will not use the report data for model training by default.

Primary source not confirmed: these details come from TechCrunch's report of the claude.com announcement, and that coverage names no plan tiers. It describes the tools as aimed at enterprise customers. Nothing in it says Pro, Max or Team plans get the reports or pooled budgets. Until the claude.com post confirms otherwise, treat small teams as unaffected. Take a 25-person accounting firm with 8 staff on Claude Team. Assume $30 per seat per month. That is $240 a month, or $2,880 a year, and the price is fixed per seat. A report on token cost would not change that bill. The case is different for usage-based billing. Take a 15-person agency with two developers running Claude Code on API credits, and assume $400 each a month. A pooled budget with a cap would help them, because Jellyfish data cited in the coverage shows spending on these coding tools grew 10x this year. Owners paying flat seats can ignore this. Owners whose Claude bill moves month to month should check which plans get pooled budgets.

On Oct. 28, during Alphabet's third-quarter earnings call, Google said it is expanding ads in AI Mode to international markets for the first time and adding multi-turn ads in AI Mode in the U.S. Alphabet reported third-quarter revenue of $127.6 billion, up 25% year over year, while Google Search revenue grew 12%, down from 17% in the second quarter.

Primary source not confirmed: the expansion was announced on the earnings call. The linked Google post covers the May ad formats, so the editor should check for a Google Ads post or call transcript. For a U.S. local-service business the effect is small and unclear. The international part does not touch you. The U.S. part, multi-turn ads in AI Mode, means more of your search budget could serve inside AI answers instead of the classic results page. In the material we have, Google has not said how this changes cost per click or Local Services Ads. Take a 14-person plumbing shop spending $3,000 a month on Google Search ads. Assume 10% starts serving in AI Mode. That is $300 a month, about $3,600 a year, going to a placement the owner has never seen a lead report for. Google says click-through rates on sponsored product listings in AI Mode match organic listings. That figure covers retail products, not "water heater repair near me". Owners who run paid search should get one answer from whoever manages it. Owners who live on referrals and their Google Business Profile can ignore this.