The web moves fast every month: browsers ship security patches, search engines reshape how results look, and performance standards keep tightening — and all of it eventually lands on the sites we build and maintain in Tunisia. Here is the web news that actually matters from September 2026: Chrome's big security update, the growing footprint of AI in Google search, and where Core Web Vitals stand worldwide.
Chrome 154: a major security release
Google shipped Chrome 154 (version 154.0.8037.57) on September 22, 2026, for Windows, Mac, Linux and Android. The release fixes 108 security vulnerabilities, including 10 critical issues affecting ANGLE, WebGL, ServiceWorker and GPU components (source: Chrome Releases Blog).
In practice, this means any Tunisian business managing its own devices needs to confirm Chrome — and Chromium-based browsers such as Edge — update automatically. An outdated browser remains one of the most common entry points for attacks against login forms, WordPress admin panels, or customer accounts on an e-commerce site.
Google and AI: no new algorithm update, but a real shift underneath
Unlike some previous months, Google has not announced a new core search algorithm update in September 2026; the most recent one remains the August 18 spam update, which lasted just over two days (source: Quantifi Media). The official Google Search Status Dashboard remains the only reliable way to confirm an update before reacting to speculation.
The bigger shift is elsewhere: AI Overviews — the AI-generated summaries shown above classic results — now appear on close to 48% of Google searches, up sharply from a year earlier (source: Advanced Web Ranking, cited by The Stacc). Independent studies put the drop in organic click-through rate at roughly 34% to 46% when an AI Overview appears above the fold. Google has also added new AI-visibility reports inside Search Console to help site owners track the effect.
For a Tunisian business, this doesn't change the fundamentals of SEO: useful content, a clear structure, and direct answers to real questions. But it does raise the value of stating a precise, verifiable answer in the opening lines — the format generative AI tends to reuse.
Core Web Vitals: INP is still the hardest metric to pass
On the performance side, Chrome UX Report data shows that in 2026, 43% of websites still fail the 200ms threshold on Interaction to Next Paint (INP), the metric measuring how fast a page responds to a click, tap or keystroke. Globally, 87.1% of origins do achieve a good overall Core Web Vitals score (source: The Stacc). INP became an official Core Web Vital in 2024, replacing First Input Delay (see the original announcement on web.dev), and has remained the most commonly failed vital across the open web ever since.
For an online shop or a service website, a poor INP score shows up as menus that take a moment to open, buttons that don't react instantly to a tap, or forms that feel frozen on mobile — exactly the kind of friction that loses a visitor right before they convert.
This week, in three numbers
| Topic | Key figure | What it means for your site |
|---|---|---|
| Browser security | 108 fixes in Chrome 154, 10 of them critical | Update browsers and workstations without delay |
| Google search | AI Overviews on ~48% of queries | Lower organic CTR, more value in direct, sourced content |
| Web performance | 43% of sites still fail INP (200ms) | Audit your site's mobile responsiveness |
Three things worth doing this week
- Check your security updates — browsers, CMS and plugins need to stay current; a site running on an outdated CMS or extensions is an easy target.
- Track your AI search visibility — use the new AI-related Search Console reports and watch organic traffic trends instead of reacting to unconfirmed algorithm rumors.
- Test your INP score — a performance audit catches slow interactions (menus, forms, store filters) before they start costing you sales.
As we covered in our article on the signs it's time to modernize a website, security and performance aren't optional extras — together, they are the most common explanation for a slow, steady loss of traffic or conversions.
Is your website up to date and fast enough?
We run a free security, speed and Core Web Vitals audit for your website.