Venezuelan Election Operation Among ‘Good’ Grand Prix Winners on Cannes Lions 2026 Day 5

Comando Con Venezuela, the informal Venezuelan political organization established to support politician María Corina Machado’s candidacy, has won the Grand Prix for Good for its “600K Network” election operation by Rainbow Lobster.

When Machado was barred from standing as the leading opposition candidate to the widely classified authoritarian dictator, Nicolás Maduro, the political organization meticulously planned a way to prove the 2024 Venezuelan presidential election was rigged, after the opposition had disputed the ballot count for years without proof.

Comando Con Venezuela secretly trained 600,000 volunteers and election witnesses to use their cell phones to scan and digitally secure the QR codes printed on the physical voting ballots, gathering 85% of voting tallies. When Maduro claimed power without proof, the Associated Press reported a 30-point gap between the official results and the actual results, a finding corroborated by The Carter Center and The Washington Post.

Machado went on to win the Nobel Peace Prize for her efforts to save Venezuela from its authoritarian fate.

Here are the other Grand Prix winners across Glass and Sustainable Development Goals.

Glass 

Instituto Yduqs, the philanthropic arm of Yduqs, Brazil’s largest higher education group, and IDOMED, a medical education institute, won the Glass Grand Prix for their medical study, “Nigrum Corpus.” The campaign was created by Artplan and tackles the fact that Black patients in Brazil (who make up 55.5% of the population) are six times more likely to suffer medical errors.

Drawing from testimonies and healthcare data, they created a study to teach medical students how to treat Black bodies, mapping more than 20 conditions and including diagnostic comparisons across skin tones to dosage differences between Black and white children. The study was made available to universities across Brazil as a literacy tool for future doctors and has now been included in the World Health Organization’s collection.

Sustainable Development Goals 

Kenyan dairy brand Too Good won the Sustainable Development Goals Grand Prix for “Paid Sick Pay for Cows,” created by The Partnership Agency. Kenya has the highest per capita milk consumption in Sub-Saharan Africa, with 80% of production coming from smallholder farmers. When Too Good found out 1 in 4 milk samples tested positive for antibiotics because farmers couldn’t afford to stop production during the withdrawal period, it created a labor framework and offered farmers paid sick leave for cows. The initiative registered dairy cows as economic workers and enabled farmers to apply for paid sick leave via WhatsApp. $27,000 was returned to farmers for withheld milk, which helped protect their income.  

https://www.adweek.com/creativity/venezuelan-election-operation-among-good-grand-prix-winners-on-cannes-lions-2026-day-5/




Claude’s Super Bowl Campaign Mocking AI Ads Wins Cannes Lions Film Grand Prix

/* ========================= Base container ========================= */ .article-body-promo-ad { border: 1px dotted #f53c60; background-color: rgba(245, 60, 96, 0.05); border-radius: 8px; margin-top: 2em; position: relative; padding: 30px 16px 16px 60px; } @media (min-width: 768px){ .article-body-promo-ad{ margin: 1em max(13%, 26px); } } .ad-bookmark-icon::before { content: ""; background-image: url("https://static-www.adweek.com/wp-content/uploads/2026/02/bookmark.svg"); background-size: contain; background-repeat: no-repeat; position: absolute; left: 15px; top: 50%; transform: translateY(-50%); width: 40px; height: 40px; } /* Floating label */ .article-body-promo-ad::after { content: "Register Now"; position: absolute; top: -14px; background: #fdebed; color: #f53c60; font-size: 13px; font-weight: 600; padding: 4px 12px; border-radius: 999px; letter-spacing: 0.04em; white-space: nowrap; } [data-bs-theme="dark"] .article-body-promo-ad::before { filter: invert(1) brightness(1); } /* Typography */ .article-body-promo-ad p { font-size: 18px; line-height: 28px; letter-spacing: 0.03em; margin: 0; } /* Links */ .article-body-promo-ad a { font-weight: 700; text-decoration: none; color: inherit; } .article-body-promo-ad a:hover { color: #F6486A; } /* Dark mode */ [data-bs-theme="dark"] .article-body-promo-ad { background-color: rgba(245, 60, 96, 0.12); } [data-bs-theme="dark"] .article-body-promo-ad::after { background: #2a0f14; } @media (max-width: 576px) { .article-body-promo-ad::after { transform: translateX(-50%); top: -10%; left: 50%; font-size: 12px; } } @media (max-width: 576px) { .article-body-promo-ad { display: flex; align-items: center; gap: 10px; padding: 14px; margin: 2em 0; } } @media (max-width: 576px) { .article-body-promo-ad::before { display: none; } } .article-body-promo-ad::before { width: 28px; height: 28px; background-size: 28px 28px; } }

The future of brands gets decided here. Join the industry’s top marketers at Brandweek for the ideas, insights, and connections shaping what’s next. Get your ticket.

AI platform Claude’s Super Bowl LX campaign that mocked AI advertising has won the Film Grand Prix at Cannes Lions 2026.

Two spots—“Can I Get a Six Pack Quickly?” and “How Can I Communicate Better With My Mom?”—took home the top prize in Cannes Lions’ oldest category. The work was created by Mother London and directed by Jeff Low through Biscuit Filmworks.

The campaign, which marked Claude owner Anthropic’s Super Bowl debut, was a favorite among creative leaders going into Cannes Lions, with some predicting it would win big at the festival. It also won Gold and Silver Lions in Film and a Silver Lion in Creative Strategy.

When they were released in February, just days before Super Bowl 60, Claude’s films drew attention for taking on larger competitors like ChatGPT, which had just announced it was bringing advertising to its platform. Claude used humor to criticize this move and argue there was “a time and a place” for advertising.

The campaign even prompted a public response from OpenAI CEO Sam Altman, who lashed out at Anthropic on X and accused his rival of being “deceptive.”

“It’s an ad about where ads shouldn’t exist, it’s an AI making fun of AI, a challenger that took on the market leader,” said Pelle Sjoenell, Film Lions jury president and worldwide chief creative officer of NLS Corp. “With wicked nerve and craft in every frame, the risk was profound, the execution was immaculate, and it reshuffled the perceptions in the most consequential technology race of our age.”

Watch this year’s Film Grand Prix winner below.

https://www.adweek.com/creativity/claudes-super-bowl-campaign-mocking-ai-ads-wins-cannes-lions-film-grand-prix/




This Week on The Grid: Blind Photo Critiques

This week on The Grid, Scott Kelby took the reins for another entertaining round of Blind Photo Critiques, reviewing a diverse collection of viewer-submitted images from nearly every genre imaginable.

The lineup included creative portraits, travel photography, automotive detail shots, street scenes, wildlife, macro, underwater, and even astrophotography. As always, Scott offered straightforward feedback on what worked, what could be improved, and how a few thoughtful edits could take an image even further.

He demonstrated practical techniques in Lightroom, Camera Raw, and Photoshop, including using the People Masking tool to recover overexposed skin, creating the look of a long exposure with Motion Blur, expanding compositions with Generative Expand, and experimenting with Generative Fill—with results that were… let’s just say not always successful.

Scott also shared updates on upcoming travel photography workshops, talked about his new iPhone photography book, and gave a preview of the upcoming Photographing People Conference. Although technical issues kept Erik Kuna off camera, he still joined the conversation from California via the live chat to add a few comments along the way.

If you enjoy learning through real-world critiques and practical editing demonstrations, this episode is packed with ideas you can use on your own photos. Watch the replay below and follow along.

[embedded content]

https://layersmagazine.com/blind-photo-critiques-photo-editing.html




Il Miracolo americano, la Fabbrica tedesca e l’illusione della settimana corta: cosa muove davvero il PIL?

L’economia è fatta di numeri reali, non di sogni a occhi aperti. Un recente studio, intitolato “Differing Roles of Leisure and Productivity in GDP” e basato sull’analisi dei dati dal 1970 al 2020, ha messo a nudo le dinamiche profonde che muovono il Prodotto Interno Lordo (PIL) di Stati Uniti e Germania. Per farlo, i ricercatori hanno accantonato i vecchi modelli econometrici tradizionali, spesso troppo rigidi, e hanno utilizzato il Machine Learning – nello specifico un modello ad albero decisionale chiamato Random Forest – per misurare il peso reale di due ingredienti fondamentali dello sviluppo.

Questi due fattori sono le ore lavorate, che rappresentano le scelte sociali di una nazione in merito alla fatica fisica, e la Total Factor Productivity (TFP), un indicatore cruciale che misura l’efficienza con cui capitale e lavoro vengono impiegati. In parole molto semplici, la TFP è il progresso: rappresenta l’innovazione tecnologica, l’automazione, le infrastrutture e l’intelligenza aziendale.

I risultati, che confrontano la superpotenza americana e la locomotiva tedesca, sono netti e ci impongono una riflessione molto pragmatica.

Due mondi agli antipodi

Se guardiamo oltreoceano, gli Stati Uniti sembrano aver definitivamente sganciato la creazione di ricchezza dal sudore della fronte. L’analisi della cosiddetta “Gini importance” (un indice che valuta il peso delle variabili) mostra che negli USA la dinamica del PIL dipende per uno schiacciante 95,8% dalla produttività tecnologica (TFP). Le ore lavorate contano per un quasi invisibile 4,2%. In pratica, l’economia americana cresce a dismisura grazie a immensi investimenti in automazione, ricerca e sviluppo, e a un sistema che favorisce l’adozione rapidissima delle nuove tecnologie. Lì, a produrre valore, ci pensano sempre più i software e i capitali, non gli orari prolungati in fabbrica.

In Europa, rappresentata dal modello tedesco, il quadro è radicalmente diverso e, per certi versi, sorprendentemente “antico”. Nonostante la Germania sia famosa per la sua efficienza industriale, il suo PIL è ancora fortemente ancorato al lavoro fisico: lo studio rivela che la crescita tedesca è spiegata per il 72,7% dalle ore lavorate e solo per il 27,3% dai miglioramenti di produttività. È un’economia di stampo classico, orientata alla manifattura, che nonostante l’automazione continua a dipendere disperatamente dalla manodopera qualificata.

Ecco la scomposizione del peso dei fattori sul PIL, nero su bianco:

  • Germania: 72,7% dipendente dalle ore lavorate, 27,3% dipendente dalla TFP (innovazione).
  • USA: 4,2% dipendente dalle ore lavorate, 95,8% dipendente dalla TFP (innovazione).

Innovazione e l’illusione della “Settimana Corta”

Qui arriviamo al punto dolente, quello che smonta le facili promesse della politica. Sentiamo spesso esaltare l’idea della “settimana corta” o della riduzione generalizzata dell’orario di lavoro a parità di salario. Lo studio ci dice che tutto questo è assolutamente possibile, ma solo a precise condizioni.

Negli Stati Uniti, i dati mostrano un fenomeno affascinante: una diminuzione delle ore lavorate si accompagna spesso a un aumento del PIL. Perché? Perché il sistema ha accumulato una produttività tecnologica tale da compensare abbondantemente la minor presenza fisica dei lavoratori. La macchina, l’algoritmo o l’infrastruttura coprono e superano il turno non lavorato.

In Germania, invece, la relazione è mista e molto più insidiosa. Ridurre le ore di lavoro non è sempre compensato da un aumento di produttività. Le rigidità strutturali, le regolamentazioni e una dipendenza vitale dai settori manifatturieri fanno sì che se il lavoratore non è in catena di montaggio, la produzione semplicemente cala.

Il messaggio per l’Europa è chiaro e inequivocabile: non si può distribuire il dividendo del “tempo libero” senza aver prima costruito le fondamenta dell’efficienza e senza aprire la strada all’innovazione e alla deregolamentazione. Invocare la riduzione degli orari di lavoro senza prima investire fiumi di denaro in tecnologia, intelligenza artificiale e infrastrutture avanzate è puro suicidio economico. Significa, banalmente, rassegnarsi a produrre di meno e a impoverirsi. La vera libertà dal lavoro non si ottiene per decreto legge, ma investendo sul progresso.

Google NewsGoogle News Rimani aggiornato seguendoci su Google News!

SEGUICI

https://scenarieconomici.it/il-miracolo-americano-la-fabbrica-tedesca-e-lillusione-della-settimana-corta-cosa-muove-davvero-il-pil/




Security Leaders Discuss Texas Hunting, Fishing License Data Breach

The Texas Parks and Wildlife Department (TPWD) reported that the personal information of more than three million Texas hunting and fishing license customers may have been affected by a recent data breech. 

According to a notification on the department’s website, the Texas Cyber Command recently detected a cybersecurity incident involving the TPWD license system vendor that handles the sale of hunting and fishing licenses.  

According to the report, the investigation revealed that an unauthorized actor may have obtained personal information – including driver license information, passport numbers, email addresses, phone numbers and residential addresses for more than 3 million Texas hunting and fishing license customers. However, Social Security numbers, dates of birth and financial information, including credit card details were not obtained from this incident. The notification also stated that there was no evidence that customers under the age of 18 were involved or that any specific group was targeted.

Here, some security leaders share their thoughts on the incident. 

“It’s no surprise that TPWD used an external contractor for this. That’s incredibly common among local and state agencies since it’s usually far cheaper to outsource this than to build and maintain their own IT systems,” says Jake Williams: former NSA hacker, Faculty at IANS Research, a Boston-based cybersecurity research and advisory firm. “I actually work with one of the largest companies providing these services to state and local government agencies in the US (not the one implicated in this breach).  I can tell you first hand that the complexity in these systems is absolutely wild. Often the provider wants to do the right thing for security, but the government agency requires some security downgrade to be compatible with their other systems (usually because they’re legacy or outdated).

“It won’t surprise me at all to see other state wildlife licensing platforms being targeted. Many will use similar software and interfaces to outsourcing vendors. Threat actors will take the lessons they learn from the Texas attack to make future attacks more successful.”

“Breaches like this don’t end at the point of exposure. When driver’s license numbers and passport data hit the market, they become fuel for account takeover, synthetic identity fraud, and targeted phishing at scale,” says Kevin Gosschalk, founder and CEO Arkose Labs a fraud prevention and digital trust company and author focused on trust, AI, and the future of human-machine decision-making. “The victims here aren’t just the three million Texans whose data was taken — they’re anyone whose accounts those credentials get used to access next. Organizations need to assume this data is already in circulation and act accordingly.”

https://www.securitymagazine.com/articles/102397-security-leaders-discuss-texas-hunting-fishing-license-data-breach




Amazon Q Flaw Enabled Cloud Credential Theft via Malicious Repositories

Researchers at Wiz have disclosed a high-severity vulnerability in the Amazon Q Developer extension for Visual Studio Code that could allow attackers to steal developers’ cloud credentials by luring them into opening a booby-trapped code repository.

Amazon Q Developer is an AI-powered coding assistant that offers developers features such as code suggestions, automated refactoring, and access to external tools and services via integrations with local processes.

AWS was notified about the issue on April 20 and a patch was released on May 12. The cloud giant published a security advisory this week.

The root cause of the vulnerability was that the extension would automatically act on configuration files embedded in a workspace without first asking the user for permission. 

That meant a malicious repository could quietly run attacker-controlled commands in the background the moment a developer opened it, gaining access to whatever cloud credentials and API keys were loaded in their environment at the time.

Attack path examples include fake coding tests like those used by North Korean hackers, a typosquatted open source package, or a malicious pull request to a popular project, Wiz said.

Advertisement. Scroll to continue reading.

Developers authenticated to AWS or other cloud services would be particularly exposed, since active session credentials could be captured and exfiltrated without any visible warning.

“The combination of auto-execution, shell spawning, and environment inheritance created a high-severity vulnerability in a widely-used developer tool. A single malicious repository could compromise not just the developer’s local machine, but their cloud infrastructure as well,” Wiz noted.

AWS has patched the vulnerability, tracked as CVE-2026-12957, and a related issue involving symbolic link handling (CVE-2026-12958). 

Fixes are available across all affected Amazon Q Developer plugins covering VS Code, JetBrains, Eclipse, and Visual Studio, as well as the language server. 

“We would like to thank Wiz for collaborating with us on this issue. We have remediated this issue in language server version 1.65.0,” an AWS spokesperson told SecurityWeek.

“The AWS Language Server updates automatically unless the customer’s network configuration prevents it, so no action is required in most cases. For existing customers, reloading the IDE will trigger an update to the latest language server version, which includes this fix. If auto-update is blocked, we recommend upgrading to the latest version of the Amazon Q Developer plugin for your IDE. New customers require no action, as the latest patched version will be downloaded automatically,” the AWS spokesperson added.

Wiz noted that the underlying issue is not unique to Amazon Q; other researchers have identified similar problems in VS Code and other AI coding tools, including Claude and Cursor.

The Google-owned cloud security giant published technical details and PoC code on Friday.

Related: GitLab Patches Code Execution, Information Disclosure Vulnerabilities

Related: 25-Year-Old Vulnerability Patched in Curl

Related: Google Addresses Vertex Security Issues After Researchers Weaponize AI Agents

https://www.securityweek.com/amazon-q-flaw-enabled-cloud-credential-theft-via-malicious-repositories/




Data breach Trenitalia: esposti dati di contatto e di viaggio dei passeggeri, alto il rischio phishing

Il data breach Trenitalia, comunicato il 26 giugno, espone i dati di contatto e di viaggio di una parte dei passeggeri. La principale compagnia ferroviaria italiana ha inviato ai clienti interessati una email con oggetto “Comunicazione di violazione dei dati personali ai sensi dell’art. 34 del Regolamento UE 679/2016”, attribuendo l’accesso non autorizzato ai database dei titoli di viaggio a “soggetti esterni non identificati”; al termine delle verifiche tecniche, spiega l’azienda nella comunicazione inviata agli interessati, sono state individuate le persone potenzialmente coinvolte. L’azienda, contattata dalla stampa, ha collocato l’origine dell’incidente nell’ottobre 2025: la ricostruzione tecnica degli accessi e l’identificazione degli interessati hanno richiesto mesi prima dell’invio delle comunicazioni.

Va detto subito ciò che, secondo la stessa Trenitalia, non è stato compromesso: i dati di accesso agli account, le credenziali personali e le informazioni di pagamento come numero della carta, data di scadenza o codice di sicurezza. Non risultano, al momento, rivendicazioni note né elementi che qualifichino l’evento come ransomware: la società parla di accesso non autorizzato ai database dei titoli di viaggio.

Data breach Trenitalia: quali dati sono coinvolti

La violazione potrebbe aver interessato, qualora presenti nei sistemi associati al titolo di viaggio, diverse categorie di dati personali: dati anagrafici e identificativi (nome, cognome, data e luogo di nascita del passeggero e dell’eventuale acquirente); recapiti di contatto come indirizzo email e numero di telefono; informazioni sul viaggio, tra cui tratta, data, orario e numero del titolo; codice della carta fedeltà associata al biglietto; società o ente datore di lavoro; tipologia di offerta o servizio associata al titolo di viaggio e i dati necessari per fruirne; estremi del documento d’identità; dati tecnici connessi alla generazione del titolo di viaggio. L’ampiezza esatta della platea coinvolta non è stata quantificata ufficialmente. Si tratta, nel complesso, di informazioni che descrivono chi viaggia, come raggiungerlo e quando: un profilo prezioso per chi voglia confezionare comunicazioni fraudolente credibili.

Notifica a Garante e CSIRT, denuncia alla Procura

Trenitalia dichiara di aver adottato immediatamente le misure per contenere l’incidente, interrompendo l’intrusione e rafforzando i controlli sui sistemi. L’accaduto è stato notificato al Garante per la protezione dei dati personali e al CSIRT Italia, e una denuncia è stata presentata alla Procura della Repubblica presso il Tribunale di Roma per avviare le indagini. La società richiama l’articolo 34 del GDPR e le Linee guida EDPB n. 9/2022 (versione 2.0 del 28 marzo 2023) sulla notifica delle violazioni di dati personali, spiegando che la ricostruzione degli accessi e l’identificazione dei clienti hanno richiesto tempo: un passaggio che illustra bene le tempistiche e le valutazioni di rischio dietro la notifica al Garante e la comunicazione agli interessati.

Il rischio vero: phishing su misura

Proprio perché non sono in gioco password o dati di pagamento, il pericolo più concreto si sposta sull’inganno. Recapiti e dettagli di viaggio sono il materiale ideale per costruire messaggi credibili: la stessa Trenitalia avverte i clienti della possibilità di ricevere email, SMS o telefonate che facciano riferimento a viaggi reali, invitando a non fornire dati personali o finanziari e a verificare sempre il mittente. È la logica dello spear phishing, la truffa personalizzata che usa informazioni autentiche della vittima per abbassarne la guardia. La società ricorda che non contatterà mai i clienti per chiedere password o dati di pagamento e ha attivato un servizio dedicato tramite il webform “Privacy – Gestione dei dati personali”.

Per chi si occupa di sicurezza, il caso conferma che una violazione senza dati finanziari non è una violazione minore: l’esposizione di contatti e abitudini di viaggio alimenta campagne di frode mirata che possono colpire a distanza di settimane. Trenitalia rientra inoltre tra i soggetti essenziali per il Paese ai sensi della direttiva NIS2, e un episodio simile mostra quanto la superficie d’attacco di queste realtà comprenda ormai l’intera base clienti, non solo i sistemi operativi del trasporto. La difesa, lato utente, resta la verifica del canale e del mittente prima di cliccare; lato organizzazioni, il monitoraggio delle ondate di phishing che sfruttano il marchio Trenitalia nei prossimi giorni.

Un contesto più ampio: la notifica parallela di Trenitalia Tper

L’episodio si inserisce in una sequenza che ha interessato l’ecosistema informatico del gruppo Ferrovie dello Stato. Nello stesso arco temporale dell’origine dichiarata dall’azienda, tra fine novembre e dicembre 2025 era emerso un attacco ad Almaviva, fornitore IT del gruppo FS, con l’esfiltrazione di circa 2,3 terabyte di dati poi comparsi su un forum della rete Tor e riconducibili a numerose società del gruppo, Trenitalia inclusa.

Va tenuta distinta una seconda notifica, formalmente autonoma. Trenitalia Tper S.c.a.r.l., società che gestisce il servizio regionale in Emilia-Romagna, ha inviato nelle settimane precedenti una propria comunicazione ai sensi dell’art. 34 GDPR a clienti e dipendenti, con lo stesso impianto: accesso non autorizzato da parte di soggetti esterni non identificati, esclusione di credenziali e dati di pagamento, avviso sul rischio di phishing mirato. La comunicazione Tper differisce però da quella nazionale su punti verificabili: notifica al solo Garante con generico rimando alle Autorità competenti, assistenza tramite numero telefonico dedicato anziché webform, nessun richiamo alle Linee guida EDPB, invio via SMS anziché email. Si tratta quindi di due soggetti giuridici distinti e di due comunicazioni separate. Allo stato, le aziende non hanno dichiarato un nesso ufficiale tra le notifiche e l’attacco ad Almaviva: la coincidenza temporale è documentata, mentre l’attribuzione a un’unica matrice resta una ricostruzione non confermata.

Condividi sui Social Network:

https://www.ictsecuritymagazine.com/notizie/data-breach-trenitalia-passeggeri-phishing/




A Third Of Fintech Is Invisible To AI Agents via @sejournal, @slobodanmanic

A third of the top fintech websites in the world deliver less than 80% of their homepage content in raw HTML. That is the version of the page an AI agent gets when it visits, before it decides whether to spend the compute on a full browser render. Most of them do not.

The Structure pillar of Machine-First Architecture says critical information must not depend on client-side JavaScript. Rendering independence. Until last month, this was a design principle. Now it is a number, and the number is uncomfortable.

On May 25, I measured 274 fintech homepages from the CNBC World’s Top Fintech Companies 2025 list. I made two sequential measurements on each one: a raw HTTP fetch with no JavaScript execution, and a full browser render with Playwright. The gap between the two readings is the gap an AI agent has to close on its own. 36% of these websites force it to do that work for the most important page on the property. The full study is published on Web Performance Tools.

Most AI Visibility Coverage Skips The Rendering Step

Most AI visibility coverage focuses on schema markup, structured content, brand authority signals, and optimization for AI Overviews, ChatGPT search, Perplexity citations, and Gemini’s grounding pipeline. The advice stacks up fast.

All of that assumes the agent saw your content in the first place.

Most AI crawlers do not render JavaScript. GPTBot, ClaudeBot, PerplexityBot, the AI user-agent landscape feeding the models you are trying to be cited by, they make HTTP fetches and walk away. They are not browsers. Running a real Chromium instance per page costs compute that multiplies across the millions of pages these systems want to read. So they don’t, by default. They take what comes back in the raw HTTP response and move on.

There are exceptions. Google’s crawler runs a deferred rendering pipeline for some pages. Some AI systems will render for high-value targets, or render selectively when the raw response looks empty. The pattern is not absolute. But the production default for the crawlers that feed the largest AI systems on the web today is raw HTTP fetch, no JavaScript, take what is there.

This creates a gap that users do not see. A real visitor opens your website in a browser. JavaScript runs. The page assembles in the viewport. Content loads, layout settles, the hero image arrives. The visitor sees what you built. The AI agent fetches the response before any of that happens. Whatever does not show up in the first HTML response is, for that agent, not there.

This is what the Structure pillar of Machine-First Architecture is about. Critical information must not depend on client-side JavaScript. The page must be parseable from the raw HTTP response, not from the browser-rendered view five seconds later. This is not a performance preference dressed up as architecture. It is a visibility requirement for the AI agents that now read the web on behalf of users.

Until recently, the rendering-independence requirement was an argument. You could read the spec, look at the crawler behaviors, draw the conclusion, and still disagree about how much of a problem it is in practice. There was no number you could point to.

The fintech data gives you the number.

Two Reads On The Same Page: Raw HTML, Then Browser Render

The test on each of the 274 fintech homepages was simple: two sequential measurements, run on May 25, 2026, from Portugal. The first was a raw HTTP fetch against the canonical homepage, no JavaScript executed, whatever bytes came back in the response. The second was a full browser render using Playwright 1.60.0 with Chromium 148.0.7778.96 in non-headless mode, capturing the page at five seconds post-TTFB and again at network idle. All measurements ran from Portugal on May 25, 2026, on residential broadband, viewport 1280 by 800, no network throttling.

For each website, content was extracted from the <main>, <article>, or <body> element and converted to Markdown to preserve structural elements. The raw-fetch text was measured as a percentage of the network-idle text. If the raw fetch returned 80% or more of what the browser eventually rendered, the website passed at full visibility. Between 60% and 79% was partial. Between 30% and 59% was low. Below 30% was near-zero.

Three reads on the same page, in the same session, separated by what the browser had to do to make the page complete: raw fetch, five-second render, network idle.

The interesting part of the curve is not the network-idle reading at the end. Almost every website in the sample resolves to full content by network idle. The interesting part is the raw-fetch reading at the start, because the raw fetch is the read most AI crawlers actually take.

36% Deliver Less Than 80% Of Their Content Without JavaScript

Out of 274 fintech homepages measured, 99 returned less than 80% of their final content from the raw HTTP fetch. That is the headline number. Thirty-six percent.

Inside that 99, the distribution is steep. Fifty-five websites (20% of the full sample) returned less than 30% of their content without JavaScript. Forty-seven of those websites returned zero. The HTML response carried a shell, the layout scaffolding, some inline scripts, no readable content. Whatever the homepage was meant to communicate required a JavaScript runtime to communicate it.

The 47 zero-content websites include major exchanges, well-known neobanks, large lending platforms, several public companies, and brands a person in finance would recognize without prompting. I am not going to call them out individually. Naming the websites would distract from the architectural observation underneath. Whether your homepage shows up to an AI agent at all is currently a function of decisions that nobody on the team was thinking about in those terms when they were made.

The 24 websites in the 60-to-79 partial-visibility band have a different problem. They show up to the agent, but not all the way. The agent gets a hero headline, maybe the primary navigation, maybe a value proposition. It does not get the product descriptions, the trust signals, the calls to action, the third-party logos. Whatever was decided to render on the client side is the part the agent does not see, and that part tends to be the part that was made dynamic because someone wanted it to feel interactive.

There is a recovery curve, and the recovery curve is where the story sharpens. Of the 274 websites, 273 reach 80%-plus visibility once a real browser renders the page for five seconds. Ninety-nine percent. The content exists. The websites are not broken. They are gated behind a runtime that the production AI crawlers do not pay for.

The median website in the sample takes 21 times longer to reach network idle than to return its raw HTTP fetch. Thirty-four websites (12%) do not reach network idle at all within the 30-second cap. That is a separate problem, but it points to the same root cause. The cost gap between fetching a website and reading it is widening, and the crawlers cannot keep absorbing the difference.

Stripe, Adyen, And Plaid Prove The Stack Is Not The Problem

One hundred and one websites in the sample returned 100% of their homepage content in the raw HTTP fetch. Full visibility before any JavaScript ran. The list includes Stripe, Plaid, Adyen, Marqeta, Remitly, Starling Bank, Neo Financial, Backbase, Thought Machine, and 92 others.

Fiserv returned a complete homepage in 58 milliseconds. Acorns in 76. Trustly in 89. Ledger in 100. Look at what those websites actually are. Fiserv is a payments-and-banking infrastructure company at a $60 billion scale. Acorns runs a consumer app. Ledger is a hardware-wallet vendor with a product catalog. They are using modern stacks, content management systems, regional CDNs, the works. They have decided that the content the homepage exists to communicate will be there in the raw response, and they have not let the framework choice override that decision.

This is the answer to the obvious pushback. The pushback is that a modern stack requires client-side rendering, that single-page applications are how the web is built now, that asking for server-rendered HTML is asking engineering to step back five years. The fintech sample disproves that on its own. The websites running the fastest raw responses took the rendering-independence requirement seriously when they made architectural choices, or rebuilt to take it seriously after the fact.

There are exceptions to this read inside the sample. Three websites underperformed at the five-second render window, even though they eventually completed. All three are Asian companies measured from Portugal, and the latency penalty likely accounts for the curves rather than the architecture.

The Web Performance Tools study tested homepages only, from one geographic origin, on one day, with one measurement per website. It did not measure interior pages. It did not test multiple regions. It did not test content gated behind scroll or click. The picture this dataset gives you is the homepage of the biggest fintech companies in the world, on a single day in May, fetched from Western Europe. That is a slice. A useful slice for the load-bearing question this article is about, but a slice.

The load-bearing question is whether the rendering-independence requirement holds at scale across a large, modern, well-resourced commercial cohort. The fintech sample answers it. Most of the cohort gets it right. A third gets it wrong, and the third that gets it wrong includes brands big enough that the architectural decisions almost certainly passed through several rounds of senior engineering review without anyone naming AI visibility as a constraint.

Fintech Is Where The Homepage Is The Trust Signal

Most categories can afford some of their homepage to be invisible. A consumer SaaS company can lose a hero subhead, and most of its visitors will not feel the difference. A media website can carry the masthead through schema and still rank for the topics the body covers. Fintech is not most categories.

For a fintech, the homepage is where regulated disclosures live. The licensing footnote. The deposit insurance language. The bank-partner attribution. The security certifications. The country availability matrix. The risk warning under the rate quote. These are the elements that turn a brand from “an interesting product” into “a thing I would actually put money into.” A reader scanning the homepage is looking for them. So is an AI agent answering a question about which provider to trust for a specific use case.

When 17% of the cohort returns zero content in the raw response, what disappears is the regulatory and trust layer of the brand. The agent does not see the bank partner. It does not see the deposit insurance. It does not see the security certifications. It sees a shell.

The category compounds the problem in a second way. Fintech buying decisions are research-heavy. A person opening a savings account, picking a payment processor, deciding which broker to fund, evaluating a wallet, they go through several rounds of comparison before they act. That comparison loop is the part of the funnel that has migrated into AI surfaces the fastest. Eric van Buskirk’s clickstream study of 846,000 Google sessions showed AI Mode users close their loops inside the AI 64% of the time, never clicking through.

The fintech research loop is increasingly happening inside an AI surface, and the agent doing the work for the user is choosing from a candidate set assembled out of the raw HTML it could fetch. If a fintech homepage returns zero content in the raw response, the brand never enters the candidate set the agent is choosing from. It is absent before the comparison begins.

This is what the Structure pillar of Machine-First Architecture exists for. The pillar is the upstream requirement that makes every downstream AI visibility strategy possible. Schema markup does not help when the agent cannot read the page. Citation strategy does not help when the model never saw the content to cite. Brand authority signals do not help when the homepage that carries them returns empty bytes to GPTBot. Structure is the floor. Everything else stacks on it.

The fintech sample shows the floor is broken for one in three of the biggest brands in the category. The sample is a snapshot. Tomorrow, some of those websites will be different, and some of the websites that scored well today will have drifted in the wrong direction. The 36% will move. What matters is that until last month, there was no number at all, and now the conversation about AI visibility for this category has a load-bearing measurement attached to it.

Run The Audit On Your Own Homepage

Open Chrome. Open DevTools. Hit Cmd+Shift+P on Mac or Ctrl+Shift+P on Windows. Type “Disable JavaScript” and hit enter. Reload your homepage.

What you see is what the agent sees. If your hero, your value proposition, your product description, your trust signals, your CTAs, and your regulatory disclosures are all visible, your homepage is passing the Structure pillar. If the hero is there but the body is gone, you are in the partial-visibility band, somewhere between 60% and 79% of your final content. If the page is blank or close to it, you are in the same tier as the 47 zero-content websites in the fintech sample.

This is the cheapest audit in the AI visibility category. It takes 30 seconds. No log-file analysis, no paid tools, no meeting with engineering. The result is binary enough that you do not need to argue about methodology. Either the agent can read your homepage, or it cannot.

If the audit fails, the fix paths are framework-specific but well-known. Next.js has server-side rendering and static generation, both of which return content in the raw HTTP response. Astro and SvelteKit ship server-rendered by default. React applications can be prerendered route by route using tools like Prerender.io or Cloudflare Pages’ prerendering layer, which serve a snapshot of the rendered page to crawlers without changing the runtime architecture for users. Vue and Angular have equivalent patterns.

The choice between these paths is an architecture conversation, not a content conversation. Most teams do not need to rebuild. They need to add a server-rendering layer for a specific set of routes: homepage, pricing, product pages, blog index, anything the brand depends on for first-impression or trust signals. The architectural change does not have to ripple through the entire application.

Stripe, Adyen, Plaid, Marqeta, and the 97 other websites in the 100%-raw-visibility list of the fintech sample did not pick simpler stacks. They picked architectures that respected the rendering-independence requirement and shipped the content in the raw response. The pushback that the Structure pillar requires going back to server-rendered PHP from 2009 is the wrong shape of pushback. The pillar requires the content to be there at the HTTP response layer. How you get it there is up to the stack you already have.

What This Sample Does Not Tell You

The study measured 274 homepages on one day from one origin. Interior pages were out of scope, which means a website with a good homepage and weak product pages would pass the test and still have the visibility problem on the routes that drive conversion. Geographic variation was out of scope. Per-crawler behavior was inferred from the raw-versus-render gap rather than probed directly. Content gated behind scroll or click is its own category of agent visibility failure, and the study did not test it.

A question this dataset cannot answer is whether AI crawlers will start rendering more pages as compute costs come down. They might. Some already do for high-value targets. If they all did, the entire framing of this piece changes. The 36% would still be invisible at the raw-fetch layer, but would be readable at the rendered layer, and the urgency of the rendering-independence requirement would soften. I do not think that is going to happen at scale soon, but I am watching for it.

Rendering Independence Was Always Real. Now It Has A Number

A third of the top fintech websites in the world are partially invisible to AI agents. Rendering independence is no longer a design principle to argue about. It has a number.

The agent will be back tomorrow. The crawl will be the same crawl. The HTML will be the same HTML. If your homepage does not return its content in the raw response, the agent that fetched it will be working from a shell, and the answer it gives the user who asked about your category will be assembled from the websites that did return their content.

Open DevTools. Disable JavaScript. Reload your homepage. The page that loads is the page the agent saw.

More Resources:


This post was originally published on No Hacks.


Featured Image: Roman Samborskyi/Shutterstock

https://www.searchenginejournal.com/a-third-of-fintech-is-invisible-to-ai-agents/576193/




Google Spam Update Rolls Out, AI Manipulation In Scope – SEO Pulse via @sejournal, @MattGSouthern

Welcome to the week’s Pulse: updates affect how Google measures its AI surfaces, what its spam rules cover, and where AI recommendations send traffic next.

Here’s what matters for you and your work.

Google Rolls Out June 2026 Spam Update

Google began rolling out the June spam update on June 24.

Key facts: Google announced the rollout on its Search Status Dashboard, noting it may take a few days to finish. This comes after Google clarified in May that its spam policies include efforts to manipulate generative AI responses in Search, such as buying or altering citations.

Why This Matters

Keep an eye on ranking changes throughout the rollout before drawing any conclusions, as spam updates can take a few days to settle. Trying to manipulate or buy citations for AI answers now falls under the same rules as older spam tactics. Tactics built to game AI Overviews or AI Mode can be treated as spam under the same policy.

What SEO Professionals Are Saying

Shushrita M., a freelance SEO consultant, cautioned against overreacting while the update settles:

A sudden decline does not automatically mean your content is “bad.” The right response is to identify which page types, queries and directories were affected, then look for a consistent pattern. SEO recovery starts with diagnosis, not panic.

Read our full coverage: Google Begins Rolling Out The June 2026 Spam Update

Mueller Clarifies What Counts As An AI Impression

Search Advocate John Mueller clarified how Google measures impressions in the updated generative AI report within Search Console.

Key facts: Mueller explained to Nicola Agius, Director of SEO and Discover at Reach PLC, that impressions indicate when links to your pages appear in AI Overviews or AI Mode. However, links that are hidden behind an expansion are only counted when a user opens them. The report currently doesn’t provide click data.

Why This Matters

AI impressions count as how many times links appear, not how often your content shaped an answer. If something is hidden behind a click-to-expand, it might be undercounted until it’s clicked on, so a low number doesn’t mean your content is missing.

Read our full coverage: Google’s Mueller Explains How AI Search Impressions Get Counted

AWR Data Shows Desktop CTR Gains As Mobile Slips

Advanced Web Ranking’s latest benchmark data indicates that desktop click-through rates are increasing, while mobile click-through declined at the top position.

Key facts: Advanced Web Ranking, a rank-tracking company, published Q1 2026 click-through benchmark data showing desktop and mobile moving in opposite directions. Mobile’s top position dropped about 2.2 percentage points, while desktop gains showed up mostly below the third position.

Why This Matters

Focus on the device split here. Desktop gains alone don’t offset months of mobile softness, so this indicates a one-quarter divergence rather than a full reversal. Review your own desktop and mobile click-through rates separately before drawing conclusions from a combined figure.

Read our full coverage: Google Desktop CTR Climbs While Mobile Dips, Report Finds

Similarweb Ties AI Recommendations To Branded Search

According to Similarweb’s report, branded search captures most of the traffic that comes after a ChatGPT recommendation, highlighting the downstream impact of AI visibility.

Key facts: Similarweb, an analytics firm, reported that 55.9% of downstream traffic came via branded search after users were exposed to a ChatGPT recommendation. The data, sourced from a U.S. desktop panel across the finance, travel, and beauty sectors, measures branded search as the pathway through which AI suggestions lead to site visits.

Why This Matters

The report’s authors suggest that branded search is a way to gauge the impact of AI recommendations, making it worthwhile to track brand demand alongside rankings. When AI mentions your name, people usually search for you directly rather than clicking a link, making the volume of branded queries a useful indicator of your visibility.

What SEO Professionals Are Saying

Aleyda Solís, SEO and AI search consultant and founder of Orainti, pointed to the measurement blind spot in the data:

AI influence can happen without a click, and this is why measuring AI Search impact only through “AI referral traffic” is not enough.

She added that standard attribution misses it:

Our current attribution models have a blind spot: AI-influenced demand often arrives through Search and Direct, not through AI referrals.

Read our full coverage: AI-Recommended Brands Saw 2.5x More Site Visits: Similarweb

Google Says It Doesn’t Evaluate Third-Party SEO Tools

Brendon Kraham from Google stated that effective SEO aligns with good GEO, and that Google doesn’t assess external SEO tools or vendors.

Key facts: Brendon Kraham, Google’s VP of Search and Commerce for Global Ads Solutions, said the work that drives search visibility carries into generative experiences. He added that Google doesn’t evaluate third-party SEO tools or vendors, and those tools have no access to Google’s internal metrics.

Why This Matters

Discount claims from any tool or vendor saying they have a special way into how Google ranks AI answers. Google has clarified that no such access is available. Focus on effective SEO strategies rather than looking for a separate GEO playbook.

What SEO Professionals Are Saying

Cyrus Shepard, who founded Zyppy SEO, agreed with the slogan but pushed on the reverse:

Google says, “good SEO is good GEO” I don’t disagree. But the same advice doesn’t always work in reverse. There are a whole lot of things AI-savvy SEOs do right now that they likely would never do if AI had never existed.

Read our full coverage: Google Says SEO Tools Lack Access To Its Internal Metrics

Theme Of The Week: The Rules And Meters Get Written Together

This week, Google shared more details on how AI search is evaluated and regulated, while independent data revealed what users are actually doing with it.

The spam update is gradually rolling out, aligning with Google’s policies that address AI-answer manipulation. Mueller explained how impressions are counted, while Kraham confirmed that no special vendor access is given to Google’s metrics. AWR and Similarweb complemented this information by providing insights into how clicks are divided between desktop and mobile, as well as showing how branded search captures traffic generated by AI recommendations.

The most reliable way to interpret any single number this week is to consider it as provisional.

Top Stories Of The Week:

More Resources: 


Featured Image: PeopleImages/Shutterstock

https://www.searchenginejournal.com/seo-pulse-google-spam-update-rolls-out-ai-manipulation-in-scope/580565/




Editoria, L’Espresso e Intesa SP digitalizzano l’archivio storico del settimanale

(Adnkronos) – E’ stato avviato – e verrà completato nella primavera 2027 – il lavoro dell’Espresso e di Intesa Sanpaolo per digitalizzare e rendere accessibile a tutti l’archivio storico del settimanale. Una ‘impresa’ che metterà a disposizione di lettori e ricercatori decenni di inchieste, reportage e copertine che dal 1955 hanno raccontato, e spesso anticipato, le svolte del Paese. Si parte oggi con gli ultimi dieci anni, dal 2025 al 2016. A seguire le annate precedenti, una decade ogni 45 giorni circa, fino al completamento previsto nella primavera 2027. Accanto all’archivio debutta una sezione dedicata: “Settant’anni di Italia attraverso L’Espresso”. È uno spazio editoriale che ripercorre la storia del Paese con lo sguardo del settimanale e raccoglie oltre cento articoli prodotti dalla redazione: ciascuno nasce da una copertina storica della testata e la rilegge in chiave contemporanea. Le grandi stagioni del giornalismo de L’Espresso ci sono tutte, dai diritti civili al divorzio e all’aborto, dalle inchieste sulla criminalità organizzata alle trasformazioni economiche, fino all’innovazione tecnologica, all’arte e alla cultura italiana. 

L’archivio – che raccoglierà oltre 400 mila pagine pubblicate dal 1955 a oggi – è raggiungibile dal sito lespresso.it, nella sezione Archivio. Come sottolinea Emilio Carelli, direttore de L’Espresso “con questo progetto, reso possibile dalla collaborazione con Intesa Sanpaolo, restituiamo al Paese settant’anni di giornalismo italiano. Un patrimonio di carta che diventa memoria collettiva a disposizione di tutti: la storia d’Italia raccontata settimana dopo settimana, con le sue inchieste, i suoi protagonisti, le sue copertine. Per troppo tempo queste pagine hanno potuto parlare solo a chi raggiungeva fisicamente, da oggi rinascono a nuova vita, pronte a essere consultate da tutti”.  

Barbara Costa, Responsabile Archivio Storico Intesa Sanpaolo dichiara: “Sosteniamo con convinzione questo progetto di valorizzazione e digitalizzazione dell’archivio del settimanale L’ Espresso, un investimento strategico per la conservazione e la diffusione della memoria del Paese. Per Intesa Sanpaolo si tratta di un impegno che si colloca nel solco di una consolidata attività di valorizzazione del patrimonio documentale, in particolare quello giornalistico, riconosciuto come fonte viva della storia italiana. Un’attenzione che nasce dall’esperienza maturata sul proprio Archivio Storico e, più recentemente, sull’Archivio dell’agenzia fotogiornalistica Publifoto: oltre 20 chilometri di documenti e sette milioni di fotografie che raccontano la vita di famiglie e imprese cresciute grazie alle oltre 600 banche che costituiscono la genealogia del Gruppo. Un patrimonio che continuiamo a rendere sempre più accessibile, nella convinzione che la conoscenza del passato sia uno strumento essenziale per comprendere il presente e costruire il futuro”. 

—

economia

webinfo@adnkronos.com (Web Info)

Novità su Google, per aggiungere Key4Biz tra le tue fonti preferite, clicca qui

Aggiungi Key4Biz tra le tue fonti preferite

Leggi le altre notizie sull’home page di Key4biz

https://www.key4biz.it/editoria-lespresso-e-intesa-sp-digitalizzano-larchivio-storico-del-settimanale/577606/