Last week was a bad week for the internet. As AI models get smarter, they're getting better at finding the weak spots in the code we all rely on, and last week several of those weak spots were exploited at once.

The biggest was a flaw in PHP, the coding language behind around 70% of the internet, including WordPress, WooCommerce stores, web apps and even government services. The flaw had existed for over a decade, but AI found a multi-step way to exploit it that could expose login credentials and secure information. Noel explains what it means if you run a simple website, whether your contact forms could be at risk, and why "keep your plugins updated" is still the right advice.

He also covers the OpenCode breach, where stolen API keys were used to fund attacks on other sites, and the Railway breach, which Noel was caught up in himself. He knew something was wrong at 7am when a Clyde update wouldn't go through, but Railway's email didn't arrive until the evening.

The practical advice: use separate API keys for every tool and project, set spending caps and billing alerts, know where the off switch is for every app you run, and use Claude, ChatGPT or Gemini to check exactly which code versions your site is running so you know what needs updating.

Plus Google's new Genie 4, which lets you build and move around in realistic 3D worlds for ads and video.

Send us Fan Mail

How to find us:

We have a free LinkedIn group (AI Automations For Business), the group is open to all.

Interested in learning WebMCP check out webmcp.academy

Check out Clyde, our multi-agent AI platform that connects to 1000+ apps and lets you build powerful automations without the complexity. Join the free Clyde Skool community to learn how to get the most out of it, share workflows, and connect with other builders putting AI to work in their businesses.

New for 2026, you can also find us on Substack, click here to subscribe and get all the latest news and updates from us.

If you would like dedicated help with your automations or would like us to build them for you then you can find our agency at makeautomations.ai

Or you can contact us via email at hello@makeautomations.ai.

Claude isn't an image or video generator, but it can make consistent, on-brand graphics for your business. Noel has been doing it for the last two months, and it's how every visual for Make Automations now gets made.

He walks through the new design system feature in Claude: what to feed it (your website, brand colours, fonts and even a full brand HTML file), what it pulls out (typography, spacing, shadows, components and image assets), and how one click in a new chat means every image after that comes out looking like your brand. Because Claude builds each image in code, small tweaks like "move that to the left" just work, instead of the usual AI image nightmare where one change redraws the whole picture. He also introduces Motion, Claude's new storyboard tool for animated video, currently on Team and Enterprise plans.

Katie raises the harder question: what this means for people copying other people's photos and creating fake videos of them, and how comfortable you should be giving AI photos of yourself.

Before that, Noel recaps the Make Waves keynote, which he watched live from start to finish. Make's big theme this year is the AI "glass box", giving you full visibility into what your agents and automations are actually doing. They also announced Process Intelligence, which records your manual work and suggests what to automate, role-based access for teams, human in the loop approvals inside Gmail and Slack, data pinning for re-running tests, and Make OS, a chat-based app that could eventually replace the visual builder altogether.

Here is the waitlist link for all the features: https://f.make.com/waves2026

Plus Anthropic giving Max and Team users at least $100 in free API credits.

Send us Fan Mail

How to find us:

We have a free LinkedIn group (AI Automations For Business), the group is open to all.

Interested in learning WebMCP check out webmcp.academy

Check out Clyde, our multi-agent AI platform that connects to 1000+ apps and lets you build powerful automations without the complexity. Join the free Clyde Skool community to learn how to get the most out of it, share workflows, and connect with other builders putting AI to work in their businesses.

New for 2026, you can also find us on Substack, click here to subscribe and get all the latest news and updates from us.

If you would like dedicated help with your automations or would like us to build them for you then you can find our agency at makeautomations.ai

Or you can contact us via email at hello@makeautomations.ai.

Don't let the word "code" put you off. If you can chat to Claude and describe what you want, you can build your own business website with Claude Code.

We've just rebuilt the Make Automations website this way, and Noel walks through exactly how we did it. The full site came together in around four hours (most of which was Claude working while Noel had his dinner). It includes its own content management system, branded Stripe payment pages, and SEO and AI search optimisation that took us to over 2,000 Google impressions and 191 AI citations in less than a month. Go and take a look at makeautomations.ai and tell us honestly: can you tell it was built with AI?

Noel covers why you'd choose Claude Code over Wix, Squarespace or WordPress, how technical you actually need to be (building is easy, publishing with GitHub and Vercel is where Claude holds your hand), and the biggest misconceptions, including why one prompt won't get you an award-winning design. He also explains why Claude responds better to feelings than instructions, how Claude Design now gives you mockups inside Claude Code, what it all really costs, and how to make changes, check your site on mobile and avoid the purple gradients that give away an AI-built website.

Katie asks who actually owns a website built with AI. For the legal side of AI-generated content, go back to Season 1, Episode 19 with UK lawyer Lucy Wheeler.

Plus the week's news: Anthropic's long overdue Haiku 5.5, which would have been a frontier model in April at a fraction of the price, and Google's SynthID AI detector (and how Noel's Claude-built images get past it).

Send us Fan Mail

How to find us:

We have a free LinkedIn group (AI Automations For Business), the group is open to all.

Interested in learning WebMCP check out webmcp.academy

Check out Clyde, our multi-agent AI platform that connects to 1000+ apps and lets you build powerful automations without the complexity. Join the free Clyde Skool community to learn how to get the most out of it, share workflows, and connect with other builders putting AI to work in their businesses.

New for 2026, you can also find us on Substack, click here to subscribe and get all the latest news and updates from us.

If you would like dedicated help with your automations or would like us to build them for you then you can find our agency at makeautomations.ai

Or you can contact us via email at hello@makeautomations.ai.