ChatGPT ads go visual, Meta's API v24 dies today, PMax gets A/B tests

**The three that matter** - **OpenAI launched visual ads inside ChatGPT image generation on October 5** - a new paid media surface with CPM/CPC/conversion pricing, 10 attribution partners, and brand-safety pilots with DoubleVerify and IAS. - **Meta Marketing API v24.0 sunsets today, October 6** - any integration or tool still on v24.0 stops working as of today; check every connector and third-party platform before end of business. - **Google Performance Max asset experiments are live across all accounts** - first-ever A/B testing for PMax creative with statistical confidence; MCC and API support rolling out this month.

Advertising & Ad Tech

OpenAI OpenAI launched visual display ads alongside ChatGPT image generation results. Starting later in October, a limited group of US advertisers can place visual ads next to images ChatGPT generates. Ads are clearly labeled and do not influence ChatGPT's answers. Pricing: CPM, CPC, or conversion-optimized via second-price auction through Ads Manager or partners. Measurement expanded with ten attribution partners plus geo-lift and brand-lift tests. Brand-safety pilots running with DoubleVerify and Integral Ad Science. Why it matters: This is the first paid inventory inside the world's most-used AI assistant; watch for early-access invitations and get clients briefed now.
OpenAITools OpenAI is blocking ChatGPT ads for rival AI image and audio products. As of September 10, advertisers cannot buy ChatGPT inventory for standalone image- or audio-generation tools competing with OpenAI's own products. Adobe Firefly was affected. Video-generation ads remain available. The policy was communicated directly to advertising partners, not published. Why it matters: The buyable categories inside ChatGPT are already shrinking; verify client product categories before booking.
Meta Meta Marketing API v24.0 sunsets today, October 6. v24.0 launched October 8, 2025 and reaches end-of-life today. Integrations on it will stop working. Key v24.0 changes: Messenger lead-ad creation deprecated, Advantage+ shopping and app campaign creation/updates restricted, Facebook video feeds placement discontinued and spend automatically shifted to other placements. Migrate to v25.0 or later immediately. Why it matters: Any reporting connector, CRM integration, or custom script built on v24.0 breaks today.
Meta Meta Embedded Signup v2/v3 deprecates on October 15 - nine days from now. This affects messaging and call-to-action workflows in Meta integrations. Why it matters: Audit any Meta messaging or onboarding flows you manage for clients and confirm they are on the current signup version.
Google Google Performance Max asset experiments are now available to all advertisers. Google rolled out the feature on October 2. Advertisers can now A/B test entire asset groups, individual assets, or seasonal versus evergreen creative within PMax with statistical confidence. Campaigns with video assets saw 25-40% performance improvement in testing. MCC and Ads API support rolling out in the coming weeks, which means agencies managing multiple client accounts will be able to run experiments at scale. Why it matters: This closes the biggest gap in PMax - creative was previously untestable; now you can isolate what actually drives performance.
Google Google Customer Match is adding IP addresses and interaction timestamps as new signals. Match-rate improvements projected to activate across all accounts in October 2026. Why it matters: Stronger first-party audience matching for every client using Customer Match.

Data & Privacy Law

Connecticut's CTDPA amendments are in effect and ban targeted advertising to under-18s outright. Effective July 1, 2026 under Public Act 25-113: processing personal data for targeted advertising or sale for anyone under 18 is a categorical prohibition - consent cannot override it. The covered-business threshold also dropped from 100,000 to 35,000 consumers processed annually, pulling more businesses into scope. Privacy notices must now disclose whether personal data is used to train AI or LLMs. Why it matters: Any campaign or data strategy reaching Connecticut audiences under 18 must exclude targeted advertising entirely; no consent framework fixes this.
Law France's CNIL is finalizing rules requiring double-consent for email tracking pixels. The proposal requires one consent for the tracking pixel itself and a separate consent for the marketing email. Not yet in force, but finalization is underway. Why it matters: Email campaigns with open-tracking into French audiences will need a consent-architecture redesign when this takes effect; start scoping the work now.
20 US states now have comprehensive consumer privacy laws as of August 2026. Indiana, Kentucky, and Rhode Island came into effect January 1, 2026. Oklahoma and Alabama arrive in 2027. All impose some form of opt-out or opt-in rights for targeted advertising. Why it matters: Single-state compliance strategies are obsolete; multi-state data governance is table stakes for any national advertiser.

WordPress

WordPress WordPress 7.1.2 patched a critical remote code execution vulnerability. Released September 22, 2026. CVE-2026-87902 allows an unauthenticated attacker to, under certain conditions, force page template resolution to include a readable local PHP file outside the active theme directories, leading to RCE. Update immediately if not already done. Why it matters: Unpatched client sites are exposed to unauthenticated remote code execution.
WordPress WordPress 7.2 is scheduled for release October 20-22, 2026. Roadmap highlights: sudo-mode re-authentication for sensitive admin actions, a first-class Secrets API for credential storage, and Application Passwords hardening.

OpenAI / ChatGPT

OpenAI ChatGPT launched virtual try-on for clothing and accessories on October 1. A "Try on" button appears on product listings; users upload a selfie and ChatGPT Images generates a virtual try-on. The reference photo is saved for future sessions. Why it matters: New shoppable surface that may feed into retail ad formats as the feature matures.
OpenAIGoogle ChatGPT Finances feature is rolling out to Free and Go users in the US (October 2). Users can connect financial accounts to track spending and investments, available on web, iOS, and Android.

Anthropic / Claude

Anthropic Claude Opus 5.5 and Claude Sonnet 5.5 launched in September 2026. Opus 5.5 is Anthropic's current leading model. Sonnet 5.5 (September 28) is the faster, lower-cost companion. Claude Fable 5.1 and Mythos 5.1 also shipped in September. Why it matters: The 5.5 family is the current production tier; if you use Claude in any integration or workflow, update to benefit from the performance gains.

Supabase

Supabase Supabase raised $150M and acquired Turso (October 2). The round was led by GIC with participation from Alphabet's CapitalG, IronArc, and SquarePeg. Turso acquisition gives developers access to higher volumes of databases for agentic workloads.
Supabase Supabase Explorer, the next-generation SQL editor, is rolling out to all projects through October 12. Query logs and database in one workspace; investigations saveable as Notebooks any team member can rerun.
OrioleDB is now in Public Beta on Pro, Team, and Enterprise plans.

Big Tech

Microsoft Microsoft released Windows 11 26H2 with a redesigned scrollable Start Menu and a customizable Taskbar that can be moved to any screen edge. Also released MAI-Transcribe-2-Streaming, a streaming speech-to-text model supporting 60 languages with continuous language detection.
Nvidia announced DGX Spark 64GB on October 2, targeting developers building and scaling local AI as capable open models shrink to fit consumer hardware.