A site that stays in search while refusing AI training, twelve breaches surfacing at a data processor, creator content one click from ads
Today's 3 verified headlines: Cloudflare announced the Disallow AI Training setting on September 15, 2026, publishing the preference in robots.txt so that Googlebot, Applebot and Bingbot keep crawling for search while a Disallow rule is added for Google-Extended and Applebot-Extended, with Google and Apple committing that ranking is not affected and the setting available on every plan, including free; KVKK published 12 separate data breach notices on September 16, 2026 under a single Board decision, all stating that the breach occurred at a data processor the companies use rather than in their own systems, with Eve Kozmetik reporting 6.26 million people, Shaya Mağazacılık 2.30 million and the 11 companies that gave figures adding up to more than 10 million; Meta announced the global rollout of its Creator Marketing Hub on September 15, 2026 during IAB Global Creator Week, bringing product-based creator discovery, expiring content permissions and one-click draft ads into one flow, adding the Meta AI business assistant and a Meta Ads MCP connector, with Instagram Live ads reaching general availability on September 29, 2026. Full analysis, sources and business impact live on each story's own page.
Cloudflare adds a setting to refuse AI training while staying visible in search
On September 15, 2026 Cloudflare announced the Disallow AI Training setting: the preference is published in robots.txt, Googlebot, Applebot and Bingbot keep crawling for search while a Disallow rule is added for Google-Extended and Applebot-Extended, and Google and Apple have committed that ranking is not affected. The controls were split into Search, Training and Agent, the old Block AI Bots toggle was retired, and the setting is available on every plan, including free. Microsoft's robots.txt support is expected in early 2027.
KVKK publishes 12 retail data breach notices in a single day: over 10 million records
On September 16, 2026 KVKK published 12 separate data breach notices under a single Board decision. All state that the breach occurred not in the companies' own systems but at a data processor they use, and most describe the mechanism as a vulnerability in a third-party software library. Eve Kozmetik reported 6.26 million people, Shaya Mağazacılık 2.30 million and Deniz Deniz 1.27 million; the 11 companies that gave figures add up to more than 10 million. Hashed passwords and admin panel credentials are among the leaked data.
Meta rolls out Creator Marketing Hub globally, Instagram Live ads arrive September 29
On September 15, 2026, during IAB Global Creator Week, Meta announced the global rollout of its Creator Marketing Hub: product-based creator and content discovery, content permissions with expiration dates, one-click draft ads from discovered content, editing tools that make content ad-ready and messaging built into the hub. The Creator Marketplace API now covers Facebook creators; the Meta AI business assistant and a Meta Ads MCP connector were added. Instagram Live ads reach general availability on September 29, 2026; the sources contain no Türkiye-specific information.
The agenda moves fast, the system stays calm.
Let's talk about what these changes mean for your business and clarify which step fits you.