Consumer News: Pets are shaping consumers’ housing, travel and spending choices

Guests probably like the check-out policy change; hosts probably dont

By Mark Huffman of ConsumerAffairs

• Airbnb will generally prohibit hosts from asking guests to strip beds, do laundry or wash and put away dishes for reservations booked on or after November 20.

• Some hosts say the restrictions undermine basic expectations of courtesy and could increase cleaning costs for travelers.

• Guests can still be asked to gather towels, put dishes in the sink and secure the property, and remain responsible for damage or excessive mess.

Airbnb is drawing a sharper line between being a considerate guest and serving as an unpaid cleaner and some property owners are pushing back.

The companys new house rules policy, applying to reservations booked on or after November 20, 2026, generally bars hosts from requesting cleaning tasks that take substantial time or would ordinarily be performed by a cleaner. Those include stripping beds, taking garbage off-site, and washing and putting away dishes.

The change addresses a familiar traveler complaint: paying a cleaning fee, then discovering a checkout checklist that turns the final morning of vacation into a housekeeping shift. Airbnb says the update is intended to make expectations clearer and eliminate surprises.

Where Airbnb draws the line

The policy allows some simple requests. Hosts can ask travelers to collect used towels, place dirty dishes in the sink, separate garbage and recycling into designated indoor bins, and turn off air conditioning when leaving.

Airbnb will consider exceptions based on the property and local conditions, such as asking guests to use an animal-proof trash container in bear country. Hosts also retain standard rules governing smoking, pets, quiet hours, events, overnight guest limits, commercial photography and locking up at checkout.

All rules and requests must appear in the designated listing section when the guest books. Hosts cannot introduce new obligations afterward through messages, signs inside the property or instructions delivered in person.

Why hosts are objecting

On Airbnbs community forum, some hosts argue that washing personal dishes is basic courtesy, particularly in homes with kitchens and shared spaces.

A German host identified as Sabine, who rents two vacation apartments with her husband, said the change creates additional work and potentially higher costs for small operators. Another host questioned how the restrictions would work during longer stays, saying the listing editor had rejected a request to move full garbage bags to a disposal room on the same floor. Others threatened to stop hosting. These comments reflect individual hosts concerns, rather than a representative survey.

Some hosts have warned that higher cleaning costs could ultimately be passed to guests. That remains a prediction; the policy does not establish higher fees or eliminate hosts ability to charge for cleaning.

Guests still have responsibilities

The restrictions do not give travelers permission to leave a property excessively dirty.

Airbnbs guest rules say cleaning fees cover routine work between reservations, including laundry and vacuuming. Guests remain responsible for damage and may face reasonable reimbursement requests for unexpected cleaning costs. Hosts can also leave cleanliness ratings and reviews, although they cannot charge penalties simply because guests failed to complete particular checkout chores.

For travelers, the practical step is to read the listings rules before booking and contact Airbnb if a host adds conflicting demands. Airbnb says persistent violations by hosts may lead to warnings, notices on listings or reduced visibility in search results.

The vulnerabilities can allow an attacker access without logging in

By Mark Huffman of ConsumerAffairs

• Wiz Research discovered critical flaws in PHP that could let attackers take over vulnerable web servers or steal sensitive information.

• The vulnerabilities affect a broad range of PHP versions, putting websites and applications across the internet at risk.

• PHP released security updates October 21, and website operators are being urged to install them immediately.

Wiz Research has uncovered multiple critical security vulnerabilities in PHP, a widely used scripting language that the company estimates powers about 70% of the worlds websites.

Collectively dubbed PHP2Shell, the flaws could allow attackers to seize control of affected servers, steal information or alter websites. Because the weaknesses reside in PHPs underlying engine, even websites with otherwise secure application code can be vulnerable.

For consumers, the potential consequences include exposed information and compromised websites. The disclosure establishes a serious vulnerability; it does not, by itself, establish that a particular website or customers data has been breached.

The findings have been grouped under two vulnerability identifiers, CVE-2026-109618 and CVE-2026-109619. Both carry a critical severity rating of 9.2 out of 10, according to Google Clouds advisory. Affected releases stretch back to PHP 5.4.

Affected platforms

PHP underpins popular platforms including WordPress, Drupal, Joomla and MediaWiki, the software behind Wikipedia. Wiz demonstrated attacks against WordPress, Drupal and Joomla deployments that allowed code execution without requiring a login. Researchers also demonstrated access to server memory containing passwords, authentication tokens and other sensitive credentials.

The bugs involve how PHP handles memory and cleans up after serious processing errors. Invalid internal data can remain available for later requests, creating opportunities for attackers to expose information or execute malicious instructions.

Artificial intelligence played a significant role in the discovery. Wiz said it used Wiz Atlas, Gemini 4 Argon and GPT-5.6 Sol to investigate longstanding weaknesses and develop working demonstrations. The company said AI substantially reduced the effort needed to turn complex memory bugs into practical attacks.

OpenAI said security company Calif independently identified a critical flaw using GPT-5.6 Sol. PHPs maintainers led the fixes, with researchers and security providers coordinating protections ahead of disclosure.

Updating is the highest priority

For website operators, the immediate priority is updating PHP. The fixed releases are 8.5.12, 8.4.27, 8.3.36 and 8.2.35. PHPs security team says all installations serving web requests are at risk and that updating is the only complete solution.

Business owners who rely on a hosting company should ask whether the PHP security fixes have been applied to their sites. Updating a content management system alone does not establish that its underlying PHP installation has been patched.

Operators using PHP 8.1 or older should consult their software vendor about backported fixes or move to a supported release. PHP says some Linux distributions and long-term support vendors provide those fixes, while temporary configuration changes only reduce exposure to specific attack paths.

The retailer was accused of failing to adequately protect customers from fraud

By Mark Huffman of ConsumerAffairs

• The FTC is sending more than $9.8 million in checks to 65,022 consumers affected by fraud involving Walmarts money transfer services.

• Payments cover eligible transfers made at Walmart between January 2015 and December 2024.

• Recipients should cash their checks within 90 days and never pay a fee to receive their money.

Thousands of consumers who lost money to scammers through Walmarts money transfer services are receiving settlement checks, with the Federal Trade Commission distributing more than $9.8 million.

The money comes from Walmarts June 2025 settlement of allegations that it failed to implement effective fraud prevention policies, properly train employees and warn customers about money transfer .

The agencys lawsuit, filed in 2022, alleged that scammers used Walmarts transfer services to steal hundreds of millions of dollars from consumers. Walmart provided those services both through its own offerings and as an agent for companies including MoneyGram, Western Union and Ria.

The settlement required Walmart to pay $10 million and take timely, appropriate steps to detect and prevent transfers induced by fraud. It also prohibited the retailer from sending or paying out transfers it knowsor consciously avoids knowingare connected to fraud.

Walmart said when announcing the agreement that it did not admit to the allegations and would continue its fraud prevention program as a money transfer services agent.

Who is receiving the money?

The FTC says checks are going to 65,022 people who completed eligible money transfers at Walmart between January 2015 and December 2024.

Simply having shopped at Walmart or used its transfer services does not establish eligibility. These payments concern consumers affected by the alleged money transfer fraud failures.

The agencys public refund notice does not spell out its detailed eligibility criteria, explain how individual payments were calculated or list a claim form for additional applicants. Consumers with questions about whether they are included should contact the refund administrator, Rust Consulting, at 1-833-472-1990.

What should recipients do?

Anyone receiving a check should cash it within 90 days, following the deadline printed on the check. Questions about a payment should go to Rust Consulting, using the contact information on the FTCs official Walmart refund page.

Consumers should also watch for scammers trying to exploit news of the payments. The FTC says it never requires people to pay money or provide account information to receive a refund. A request to send money to release a settlement payment is a warning sign of fraud.

If AI stocks are in a bubble, why do investors keep buying them?

By Mark Huffman of ConsumerAffairs

• AI stocks could fall sharply even if the technology continues to grow, especially if profits fail to meet investors expectations.

• Slower spending on chips and data centers, higher borrowing costs and cheaper competing technology could trigger a correction.

• A deeper downturn could develop if disappointing returns lead to spending cuts, tighter lending and further losses throughout the AI industry.

Ken Griffin, head of Citadel, is the latest Wall Street titan to suggest AI stocks are overpriced.

"Corporate America has been very uneven in its ability to extract value from its AI models," he said in an interview with Bloomberg. He went on to suggest that the Street is almost certainly in an AI bubble.

But despite repeated cautionary words from people in the know, AI stocks continue to go higher. So, what would actually cause AI stocks to fall?

The answer may have less to do with whether AI transforms the economy than with how much companies earn from itand how quickly those earnings arrive.

A correction, conventionally defined as a decline of at least 10% from a recent peak, could begin when investors reduce their profit forecasts or become unwilling to pay such high prices for anticipated growth. Individual companies, semiconductor stocks and the broader market could experience different degrees of decline.

The International Monetary Funds October financial stability report identifies weaker or less durable AI investment and profitability as potential triggers for falling AI asset prices. It also warns that financial vulnerabilities could amplify market turmoil.

Strong growth might not be enough

One potential trigger is a disappointing earnings report from a major AI company. Revenue wouldnt necessarily have to decline. If investors expect extraordinary growth, a merely strong result could prompt a selloff.

Rising expenses could have a similar effect. Companies might attract more customers while spending so much on computing, electricity and development that profits fall short of expectations.

Another trigger would be a decision by major cloud providers to slow their infrastructure expansion. Postponed data centers or reduced equipment orders would affect the suppliers counting on that business.

Goldman Sachs has highlighted how AI investment supports supplier earnings, while warning that slower spending growth and increasing depreciation expenses could weaken that support.

When spending fails to pay off

A more fundamental problem would emerge if customers found that AI products didnt generate enough additional revenue or cost savings to justify their expense.

Businesses could reduce subscriptions, delay new projects or demand lower prices. That would put pressure on software providers and eventually the companies supplying their computing infrastructure.

Technological progress could also unsettle investors. More efficient models or cheaper competing chips might make AI more affordable while reducing demand for particular equipment or squeezing suppliers profit margins.

Similarly, excessive construction could leave the industry with more computing capacity than customers need, pushing prices lower.

Borrowing costs could compound the damage

Higher interest rates could pressure AI stocks in two ways: by making infrastructure more expensive to finance and by reducing the value investors assign to profits expected years into the future.

Businesses dependent on borrowing would be particularly exposed. Construction delays or difficulty obtaining electricity could compound their problems, leaving them paying for equipment and financing before facilities generate revenue.

Recent reporting describes lenders demanding greater compensation to finance some AI infrastructure businesses as investors scrutinize their financial risks.

The more severe scenario would combine several problems. Disappointing returns could prompt spending cuts, weakening supplier earnings. Lenders could then tighten financing, forcing additional cuts and spreading losses.

What investors should watch

Market watchers suggest the clearest warning would be several major companies simultaneously lowering revenue forecasts or infrastructure spending plans, especially alongside weakening cash flow and more expensive financing.

A recession, new trade restrictions or a serious security incident could also accelerate a pullback.

A crash isnt the only possible outcome, however. Stocks could move sideways while earnings gradually catch up with valuations.

For households, the exposure can extend beyond individual AI shares to retirement funds holding major technology companies. The central distinction is that AIs success as a technology would not guarantee attractive returns on every stockor at every purchase price.