Weekly Dispatch · Week 28 of 2026

Time converts web pages to Markdown and uses TollBit to serve simplified content to whitelisted AI bots, creating a "two-track internet."

"Time blocks all AI bots by default, whitelists approved operators, and redirects them to the markdown versions through TollBit, a marketplace that claims structured content can be fetched in 0.25 seconds against more than a minute for a large HTML page."

A new free WordPress plugin, Royal AI Firewall, provides a dashboard and per-bot controls for site owners to manage AI crawler access.

"Royal AI Firewall was built for that gap: a live, plain-language dashboard of every AI agent that hit your site in the last 24 hours, with a per-bot dropdown to allow, block, or log-only each one."

Guide advises allowing AI search crawlers for visibility while deliberately deciding on blocking training bots, emphasizing the distinction between their purposes.

"Allow the answer-time AI fetchers that cite you and send referral traffic — ChatGPT-User, OAI-SearchBot, PerplexityBot, and Claude-Web — and decide the training crawlers (GPTBot, ClaudeBot, Google-Extended, CCBot) based on whether you want your content used to train models."

Cybersecurity researchers documented what could be the first ransomware attack executed almost entirely by an autonomous AI agent, demonstrating its adaptive capabilities.

"Cybersecurity researchers say they have documented what could be the first ransomware attack carried out almost entirely by an autonomous AI agent, marking a significant shift in how cyberattacks could be conducted in the future."

Analyzes a satirical report where AI security gates failed to detect malware, revealing concrete failure modes for agentic review architectures.

"Andrew Nesbitt's June 26, 2026 satirical incident report imagines a malicious `foxhole-lz4` package passing seven AI security gates after every automated reviewer assumes another layer checked the code."

Reports on the first observed ransomware attack executed autonomously by an AI agent, demonstrating its ability to adapt and combine vulnerabilities.

"Researchers at Sysdig say they have observed, for the first time, a ransomware attack carried out almost entirely by an AI agent."

Highlights the significant gap between enterprise AI agent adoption and the readiness of governance, data quality, and process context for autonomous agents.

"Enterprises have deployed generative AI broadly for everyday work, but far fewer have built the governance, data quality and process context required to let agents act autonomously inside real business processes."

Exposes a critical vulnerability in agentic commerce where AI agents recommend fraudulent merchant websites, leading to consumer impersonation and financial risk.

"Recent testing conducted by UK-based scam-detection service Ask Silver exposed a profound vulnerability in contemporary large language models. The investigation revealed that highly sophisticated fraudulent websites, designed to explicitly impersonate well-known British retail brands, were actively appearing inside ChatGPT shopping recommendations."

Details the architectures and protocols for agent identity, authentication, and the delegation chain, emphasizing the need for agents' own identity class.

"AI agents need identities, credentials, and authentication ceremonies of their own — separate from the humans they act on behalf of, separate from the service accounts they're often confused with."

Argues that agentic commerce will force payments processors and merchants to adapt to machine-speed purchasing decisions, necessitating a rethinking of consumer payments.

"As AI agents become more of a presence in retail commerce, payments processors and merchants alike are going to have to adjust to a new world where purchasing decisions are made at machine-speed."

The US has seen 125 AI copyright lawsuits, highlighting its role as a global litigation hub, with OpenAI and book authors leading.

"On the 250th birthday of the United States of America, the copyright lawsuits filed against AI companies hit 125. A fitting number."

Publishers await clear legal answers on AI training, outputs, and licensing, as discussed at the Publishers' Licensing Services Conference.

"Publishers are still waiting for “clear” legal answers on AI training, outputs and licensing, the Publishers' Licensing Services (PLS) Conference heard."

The MPA issued a cease-and-desist to ByteDance for alleged copyright infringement by its Seedance AI deepfake tool, escalating licensing disputes.

"No formal litigation has been filed by the studios or the MPA as of July 2026, leaving the cease-and-desist letters as the strongest legal action taken to date."

Businesses face significant legal risks from AI-generated content infringing copyrights or trademarks, making them accountable for AI outputs.

"Companies using AI are ultimately accountable for its output, not the AI itself."

Midjourney seeks to compel Hollywood studios to disclose their internal AI usage, arguing hypocrisy in their copyright infringement lawsuit.

"If Plaintiffs are doing the very thing they seek to punish, that evidence goes to the heart of Midjourney's fair use and unclean hands defenses."

US states are advancing bills on AI copyright, requiring disclosure of training data and addressing digital replicas and chatbot transparency.

"AB 412 is a copyright protection bill that passed the Assembly during the 2025 session and was held over. It would require AI developers to document any copyrighted materials used to train an AI model..."

Regulators and courts are taking different approaches to AI training data, with some focusing on transparency and others on AI-generated outcomes.

"The differing positions adopted by regulators, courts, technology companies, and publishers illustrate that no single framework has yet emerged for governing AI training."

The EU AI Act is rapidly progressing, with recent amendments and national implementation efforts shaping compliance for general-purpose AI and high-risk systems.

"The EU AI Act continued to move rapidly from law on paper to law in practice in recent weeks, with significant developments at both European and national level."

The FTC is seeking public comment on a proposed policy statement to address concerns about AI companies manipulating AI system outputs, potentially violating consumer expectations.

"The Federal Trade Commission is seeking public comment on a proposed policy statement addressing concerns that AI companies may be manipulating the behavior of their AI systems contrary to reasonable consumer expectations for objectivity and accuracy."

US companies must understand that while some EU AI Act deadlines were deferred, General-Purpose AI enforcement and Article 50 transparency obligations remain binding from August 2, 2026.

"The obligations that land first – general-purpose AI (GPAI) enforcement and Article 50 transparency – did not move at all."

The EU AI Act continues rapid evolution with recent amendments and guidelines, requiring companies to adapt to new compliance landscapes.

"The EU AI Act continues to evolve rapidly, with several recent developments reshaping the compliance landscape."

A field experiment reveals Google AI Overviews cut organic clicks by nearly 40% and increase zero-click searches, without affecting sponsored clicks.

"When an AIO would have appeared, hiding it increased organic clicks by 39.8% and cut zero-click searches by 34.5%."

UK regulators impose a new conduct requirement on Google, allowing publishers to opt out of AI summaries and demanding proper attribution.

"In June, the UK's Competition and Markets Authority (CMA) announced that online publishers and news organisations will be able to opt out of their content being used in AI summaries on Google's search engine."

Commentary argues Google's AI Overviews extract value from publishers without compensation, and the CMA's remedy doesn't address the core economic harm.

"Google's AI Overview doesn't renegotiate that bargain. It ends it, unilaterally, while keeping the publisher inside the index that makes the rest of Google's business model work."

Google is replacing publisher links in its Discover feed with AI-written summaries, further reducing referral traffic for news organizations.

"Google has started replacing publisher links in its Discover feed with AI-written posts summarising related stories."

An essay details how AI-powered search is fundamentally reshaping digital publishing, leading to a crisis as AI answers reduce website visits.

"Every answer generated by AI may represent a website visit that never happens. Every summarized article may represent page views that disappear."

An expert discusses strategies for brands and agencies to build high-value audiences from first-party data while maintaining privacy and ensuring data quality.

"Strong first-party data strategies start with the basics. A fair value exchange where consumers share their data in return for useful content, services, or experiences that genuinely matter to them."

Research explores how AI can either repeat colonial patterns of data extraction or become a tool for digital stewardship if guided by Indigenous ethics and consent.

"The central claim is that Indigenous Knowledge should not be treated merely as content for digital preservation or computational analysis, but as a relational system governed by protocols of responsibility, consent, sacred limitation, and collective ownership."

An analysis discusses the controversial role of AI in the survival of minority languages, highlighting risks of bias and opportunities for preservation.

"AI models predominantly trained on English reflect Western-centric views, treat dialects as less “correct” and often fail to understand regional variants."

Azis Abakirov champions AI democratization to empower minority language communities to build their own systems, safeguard cultural identity, and secure digital sovereignty.

"His mission is to transform developing nations into AI powerhouses, empowering minority language communities to build their own systems, safeguard cultural identity, and secure digital sovereignty."

Cloudflare introduces a 'Pay Per Use' model, evolving from 'Pay Per Crawl,' to compensate publishers when their content appears in AI results.

"The company is also evolving its Pay Per Crawl experiment into a broader Pay Per Use model, where publishers could be paid when their content appears in an AI result or when an agent purchases premium information for a specific task."

Cloudflare sets a deadline for AI crawlers to pay for content access or face blocking, shifting from a 'Pay Per Crawl' to a 'Pay Per Use' model.

"Cloudflare is also rebranding its old Pay Per Crawl tool into Pay Per Use, and the shift matters: instead of billing every single fetch, site owners get paid when their content actually shows up inside an AI chatbot's answer."

Australia's Nine Entertainment signs a one-year pilot deal with Microsoft Copilot for full-text journalism access, guaranteeing attribution and click-through links.

"Nine Entertainment and Microsoft signed a one-year pilot letting Copilot pull full-text Nine journalism, not just previews, to ground AI search answers."

An analysis of AI's impact on independent magazine publishers, focusing on areas where AI can assist or undermine creativity and customer value.

"While AIs are able to generate words and photographs in seconds, only parts of the indie publishing industry appear ripe for technology disruption."

Commentary argues publishers, especially small ones, need a payment model for AI citations as traffic recovery is unlikely, advocating for native advertising within AI answers.

"Search referrals fell roughly 60% for the smallest publishers between 2024 and 2025, against approximately 22% for the largest, according to Chartbeat data reported by Axios."