This week: the clock change that costs an estimated $670 million a year and spikes heart attacks, car crashes, and workplace injuries. Then the 9.2/10 PHP vulnerability that set off security alerts from governments worldwide. If you run WordPress, confirm your patch is permanent and not a December-expiring band-aid. Node.js, GitLab, Java, and Cisco also need updates.

Also: pacspam.org, the crowdsourced tracker for unsolicited political texts, passed 1,000 reports in two weeks. Who sends them, which loopholes make it legal, and who profits.

Finally, a small North Carolina restaurant beat Grubhub in a class action over unauthorized listings. The same rules (FTC Business Impersonation Rule, California AB 488, trademark false association) apply to shadow donation pages listing your nonprofit without consent. Restaurants fought this fight already. Nonprofits are next.

A blue wave of galactic proportions has shaken Washington—but what does it mean for nonprofits?

This week, we're breaking down the election's seismic political shift and what it could mean for nonprofit funding, corporate philanthropy, DEI, and the future of federal policy. From big tech's sudden change of heart to new opportunities for advocacy and state-level partnerships, we're looking at what comes next for the sector—and whether corporate America's social conscience is finally coming out of hiding.

Who’s fundraising in your nonprofit’s name? This week on Nonprofit News Feed, we examine “shadow donation pages,” third-party fundraising pages created without a nonprofit’s permission. The discussion takes a close look at Roundup.org and raises concerns about fees and the potential loss of direct donor relationships. We also explore how search engines and AI could steer supporters toward these pages, plus what Charity Navigator’s great leadership in shifting to opt-in donation buttons could mean for nonprofit consent.