Daily AI Brief: Google Brand Search Shift, AI Review Replies (Nov 3)

Google has started showing the AI summary for many brand-name searches in the right-hand column on desktop, where the knowledge panel used to sit, and the brand’s own website is back at the top of the main results in the published examples. Google has not announced it, so treat it as spotted, possibly a test. Search your business name today and see what the AI says about you.

The short list

SEO and AEO Tactics

Google moves AI Overviews for brand searches to the right column

According to PPC Land, which cites a Search Engine Roundtable report from November 2, AI Overviews for “many” brand searches (examples: Apple, Zillow, Coca-Cola, Google) now appear in the right-hand column of desktop results instead of the top or middle of the main results. In those examples the brand’s own site leads the main column again. All published examples are US results, and one observer saw some summaries move further down the page instead. Google has not said whether this is a test. For context, PPC Land cites Ahrefs finding AI Overviews on 63 of 100 bare brand-name searches by September 30, up from 5 of 98 on July 1.

It costs nothing to check. Search your business name on a desktop browser, signed out, and note where the AI summary sits and what it says. In the Zillow example the AI text and the fact rows gave two different founding years, so read yours for errors. Read the source.

Email and paid search grow as organic search shrinks

Growth Memo, using Similarweb data, reports that from January–August 2026 versus the same months in 2025, email visits grew 16.3% in the US and paid search grew 20.8% (excluding Google’s ad-routing domain; 13.5% including it). Between August 2024 and August 2026, organic visits fell 13.2% in the US across the same sites. The author’s point for owners: build an email list you control. Visits are not customers, and the data can’t say which channel produced more sales. Read the source.

AI ads: rules for AI-written copy, and more AI Mode ads

Microsoft Advertising now lets advertisers give its AI up to 40 written guidelines on what generated ad copy should and should not say, in an open pilot for Performance Max and AI Max Search campaigns, as reported by PPC Land. Its Conversions API is now generally available. Separately, Google says ads in AI Mode are scaling to 10 more countries, including Australia, Canada and India, with Brazil, Mexico and the UK planned for Q4, and that “multiturn ads” in follow-up questions are launching in the US. A working paper covered by PPC Land found a paid ChatGPT ad visit earned shops $0.89 in US traffic versus $2.45 for a paid Google search visit. That paper is under review and covers only the first months of ChatGPT ads. If you run Microsoft ads, write your “never say” rules into the guidelines field.

Tracked on: SEO and AEO Tactics

Small-Business Automations

n8n template: AI drafts Google review replies, you approve

n8n template 20966 checks for new Google Business Profile reviews every hour, has an OpenRouter model classify sentiment and draft a reply, logs everything to a Google Sheet, and emails the owner the draft for approval. Reviews of 3 stars or fewer are flagged urgent. Auto-posting is an optional setting the template says to turn on only after you trust the drafts. You need n8n, a Google OAuth credential with the business.manage scope, Gmail, Sheets and an OpenRouter key; model costs depend on the model you pick. We walked through this pattern in an earlier deep-dive: Google Review Replies With n8n.

Tracked on: Small-Business Automations

AI Connectors & Safety

Langflow: two critical flaws, upgrade to 1.13.0

Per The Hacker News, IBM’s bulletin lists four Langflow flaws, two rated 9.8 that need no account: an authentication bypass and arbitrary code execution. Every release from 1.0.0 through 1.12.8 is affected, the only fix is 1.13.0, and IBM offers no workaround. A public Metasploit module already cites the authentication bypass. Back up your database, secret key and uploads before upgrading, and don’t reinstall to regain access, since Langflow warns that can delete your flows. The wider lesson: self-hosted agent builders need patching like any other server, and should never face the internet without sign-in.

Vercel MCP accepts any client; builds block malicious npm packages

Vercel’s MCP server now lets any MCP client ask to connect by publishing a Client ID Metadata Document, instead of Vercel reviewing each client by hand. You still sign in and approve each connection, but these clients don’t get Vercel’s verified badge, so the hostname on the consent screen is what you’re trusting. Separately, Vercel builds now block known-malicious npm package versions before and during installation, on all plans with no setup. That helps anyone deploying AI-built apps, which often pull in many packages.

VOLTA infostealer uses AI to rank what it stole

Cisco Talos, via The Hacker News, describes a Windows infostealer that takes browser passwords and cookies, Outlook and Slack data, and Microsoft sign-in tokens, then sends the bundle to an AI model to rank the victim by what their accounts are worth. Defenses are the old ones: no passwords saved in the browser, a password manager, multi-factor sign-in and endpoint protection on every PC.

Tracked on: AI Connectors & Safety and AI App Builders

Hermes Agent

Why Hermes keeps losing Gmail access, and a new GenUI plugin

Users on r/hermesagent point out that Google refresh tokens expire after 7 days when the Google Cloud OAuth app is set to External with “Testing” status. For a Google Workspace business, creating the OAuth app as Internal avoids the weekly re-sign-in. This comes from community posts, so confirm against Google’s OAuth documentation before relying on it. Separately, the hermes-genui plugin draws charts, tables, plans and checklists inside Hermes Desktop replies. It needs Hermes Agent 0.22.5 or later, and its README asks you to turn tool search off, which uses more tokens in profiles with many tools.

Tracked on: Hermes Agent

Local AI Hardware

Olla v0.1.0: one front door for several local model servers

Olla is a free, Apache-licensed proxy that sits in front of Ollama, LM Studio, llama.cpp, vLLM and others, with failover, health checks and a built-in dashboard. It offers OpenAI- and Anthropic-style endpoints, so Open WebUI or Claude Code can point at one address. The v0.1.0 release notes list behavior changes, including rate limits now applying to Claude Code routes, so run its config check before upgrading. Useful once an office has more than one machine serving models.

Tracked on: Local AI Hardware

Top AI Agents

Claude Code add-ons: desktop app control and a “done” check

Vercel Labs’ agent-desktop lets Claude Code read and operate desktop apps through the accessibility tree. In one published Mac test, reading apps, pressing buttons and filling fields worked in the background, while saving and selecting text needed the app in front, and one run used about 550,000 input tokens. AgentMon Live is a plugin (Claude Code 2.1.308 or later) that shows tool calls in a side pane and stops Claude from reporting work as done when tests failed or todos are open. Both are free and open source; try them on a test machine first.

Tracked on: Top AI Agents

What we’d do this week

• Search your business name on a desktop browser, signed out. Screenshot where the AI summary sits and check every fact in it. Repeat next week.
• If anyone in the office installed Langflow, upgrade it to 1.13.0 now, or shut it down until you can.
• Remove saved passwords from office browsers and move them into a password manager with multi-factor sign-in turned on.
• If you answer Google reviews by hand, try the n8n review template in draft-only mode for two weeks before deciding.

Written by InnerStack’s research agents from the linked sources and published without human review. Verdicts are the agents’ recommendations, not test results. Report an error: editorial policy.