SEO Roundup: Key Findings
- Same URLs appearing in both SERPs and AI Overviews count as one impression in Google Search Console, clarifies John Mueller.
- WordPress plugin NotificationX FOMO vulnerability affects 40,000+ websites, enabling unauthenticated attackers to inject malicious scripts.
- 75% of ChatGPT users rely on keywords for local services with 45% of sessions being one-shot prompts, revealing search-like behavior patterns.
The DesignRush SEO team provides weekly analysis of critical shifts across search and paid advertising. Brands needing expert guidance can explore our vetted directory of SEO agencies.
This week brought technical clarifications from Google, a serious WordPress security threat, and revealing data on how people actually use ChatGPT for search.
Here's what search teams need to know from this week's developments.
AI Overview Impression Counting
Google's John Mueller confirmed that the same URLs appearing in SERPs and AI Overviews count as one impression in Google Search Console.
The clarification means AI Overview visibility doesn't artificially boost impression counts, requiring teams to adjust how they analyze this feature's impact.
The single-impression rule keeps GSC data consistent but masks actual reach when content appears in both formats.
WordPress Security Vulnerability
An advisory was issued by WordPress security firm Wordfence for a vulnerability in the NotificationX FOMO plugin, affecting more than 40,000 websites.
The flaw enables unauthenticated attackers to inject malicious scripts, risking data theft, malware distribution, and SEO spam injection.
WordPress site owners should immediately update to patched releases to prevent exploitation.
SEO Impact of Comment Spam
Google's John Mueller confirmed that link spam left in comment sections does not affect Google Search or SEO performance.
This statement should reduce concern among site owners, as these links don't negatively impact rankings.
However, comment spam still creates user experience and moderation burdens even if it doesn't hurt SEO.
For more details Kindly have a look at the below image.] ibb.co/rRmzND7K
— crystaivf.bsky.social (@crystaivf.bsky.social) January 17, 2026 at 6:20 PM
[image or embed]
Organic Search Traffic Declines
Organic search traffic dropped 2.5% year over year, which is nowhere near the 25% to 60% drops often cited in industry commentary, according to Graphite analysis.
The data suggests widespread panic about search traffic collapse may be overstated, with most sites seeing modest rather than catastrophic declines.
The discrepancy points to survivorship bias, where the loudest voices represent outliers.
ChatGPT Search Behavior Patterns
New data shows that 75% of ChatGPT users rely on keywords for local services, while 45% of sessions were one-shot prompts.
The behavior closely mirrors how people use traditional search engines, prioritizing speed and clarity over dialogue.
For search teams, this suggests that solid keyword research and direct answers remain central even inside AI-driven interfaces.
Google’s Position on LLMs.txt Files
Google's John Mueller confirmed that Google doesn't endorse LLMs.txt files, pushing back against speculation that the format would become a standard.
Mueller's statement suggests Google prefers existing structured data formats over new AI-specific files.
Sites that implemented LLMs.txt based on speculation should reassess whether the effort provides actual value.
Scores like that are made up by SEO tools - they're not used by Google. www.youtube.com/watch?v=AiAx...
— John Mueller (@johnmu.com) January 19, 2026 at 4:42 PM
[image or embed]
This Week's Industry Perspectives
SEO expert Matt Diggity pointed out that Google's AI Overviews cite YouTube more than actual hospital websites for health queries.
This observation raises questions about the search giant's source quality standards when AI features prioritize video content over authoritative medical institutions.
SEO expert Cyrus Shepard also noted that Google's core and spam updates are targeting SEO best practices that many professionals have relied on for years.
What worked reliably for the past decade may now trigger algorithmic penalties, forcing practitioners to unlearn tactics that previously delivered results.
Google’s core & spam updates are targeting the SEO best practices many of us have relied on for years.@CyrusShepard explains why well-optimized content alone is no longer enough, and why branded anchor text is one of the strongest correlations between sites that win or lose… pic.twitter.com/4QQcf7LZWF
— Advanced Web Ranking (@awebranking) January 19, 2026
These updates create three immediate action items:
- Revisit measurement assumptions. Search teams should adjust reporting to account for how AI features are counted, avoiding overestimation of reach or visibility.
- Audit technical exposure beyond rankings. Plugin security, spam vectors, and site integrity now demand the same priority as on-page SEO work.
- Optimize for intent-first AI usage. Keyword-driven, one-shot behavior means existing SEO fundamentals still apply inside AI interfaces and local discovery.
The gap between industry panic and actual data (2.5% vs. 25-60% traffic drops) suggests that teams should focus on their own metrics before reacting to generalized narratives.
Our Take: Is There a Measurement Crisis in SEO?
I think this week's SEO news updates reveal a huge measurement crisis.
Right now, dramatic outlier stories dominate, while typical performance goes unreported, and this is distorting perceptions.
ChatGPT's keyword-heavy usage proves that new platforms don't require new strategies. They just need the adaptation of existing approaches.
I suspect the real story is the steady 2-3% erosion requiring incremental shifts, not radical overhauls.
For insights on AI search adoption patterns and YouTube's growing role in discovery, check out last week's SEO roundup.
Need support navigating technical SEO requirements and AI search optimization?
These leading SEO agencies develop strategies grounded in data rather than industry panic.





