InfoSecurity Blueprint, LLC

08/20/2026

Check out the article " 𝐖𝐡𝐞𝐫𝐞 𝐚𝐫𝐞 𝐲𝐨𝐮 𝐬𝐭𝐮𝐜𝐤?" and subscribe to the "𝐈𝐧𝐟𝐨𝐒𝐞𝐜 𝐈𝐧𝐬𝐢𝐠𝐡𝐭𝐬 𝐟𝐨𝐫 𝐒𝐌𝐁𝐬" newsletter for monthly insights on how to strengthen your Information Security Program.

Business owners get security advice from many sources: your insurer sees the questionnaire, your MSP sees the network, a vendor sees the gap their product fills. Three partial answers at once sound like noise.

08/12/2026

The Greater Olean Area Chamber of Commerce is excited to announce that this month’s installment of the Virtual Lunch & Learn Series will be with InfoSecurity Blueprint, LLC. Owner Patrick Rost will present, “The AI Conversation You Should Have Had Six Months Ago.”

To sign up for this Virtual Lunch & Learn, please use this link: https://us06web.zoom.us/webinar/register/WN_BIeY9V0WRfqtWfP_et0CkQ #/registration, email [email protected], or call 716-372-4433.

07/20/2026

Don't forget to stop in Wednesday morning!

07/15/2026

Check out the article "𝟐𝟎𝟐𝟔: 𝐈𝐬 𝐘𝐨𝐮𝐫 𝐏𝐥𝐚𝐧 𝐨𝐧 𝐒𝐜𝐡𝐞𝐝𝐮𝐥𝐞?" and subscribe to the "𝐈𝐧𝐟𝐨𝐒𝐞𝐜 𝐈𝐧𝐬𝐢𝐠𝐡𝐭𝐬 𝐟𝐨𝐫 𝐒𝐌𝐁𝐬" newsletter for monthly insights on how to strengthen your Information Security Program.

January’s newsletter “2026: Take your next step to be secure” set the challenge of “wash your first dish” to begin implementing an information security program. Also in that edition was an example timeline of tasks.

07/15/2026

Scam Prevention for Small Businesses & Individuals

📆 Wednesday July 22
⏰ 9am - 11am
📍 The Hatch SUNY JCC

The Hatch at JCC in partnership with InfoSecurity Blueprint, LLC is offering a free session to the community at The Hatch Cafe. Patrick Rost will present valuable information on avoiding current and common scams. Arm yourself with the information you need to protect yourself and your business!

Call or email to register and have an opportunity to submit questions in advance. Patrick will provide answers during the session.
📞 716-376-7506
💻 [email protected]

06/25/2026

Most AI data leaks don't involve an outside attacker. They involve an employee using an unapproved tool to get work done faster.

𝐒𝐡𝐚𝐝𝐨𝐰 𝐀𝐈 𝐰𝐚𝐬 𝐚 𝐟𝐚𝐜𝐭𝐨𝐫 𝐢𝐧 𝟏 𝐢𝐧 𝟓 𝐛𝐫𝐞𝐚𝐜𝐡𝐞𝐬, adding an average of $670,000 to breach costs. Sensitive business data, client records, internal documents: all of it can enter platforms the business knows nothing about. When employees use free AI tools, that data may also be used to train the model.

Data exfiltration isn't a new problem. 𝘜𝘯𝘴𝘢𝘯𝘤𝘵𝘪𝘰𝘯𝘦𝘥 𝘈𝘐 𝘵𝘰𝘰𝘭𝘴 𝘩𝘢𝘷𝘦 𝘤𝘳𝘦𝘢𝘵𝘦𝘥 𝘢 𝘯𝘦𝘸 𝘤𝘩𝘢𝘯𝘯𝘦𝘭 𝘮𝘰𝘴𝘵 𝘱𝘰𝘭𝘪𝘤𝘪𝘦𝘴 𝘥𝘰𝘯'𝘵 𝘺𝘦𝘵 𝘤𝘰𝘷𝘦𝘳.

A starting framework:
🔍 Audit which AI tools employees are currently using
🚫 Block unapproved platforms at the firewall
✅ Provide an approved AI solution with a business license
📋 Document acceptable use in a formal AI policy

The goal isn't to block productivity. It's to keep sensitive data 𝐢𝐧𝐬𝐢𝐝𝐞 𝐭𝐡𝐞 𝐩𝐞𝐫𝐢𝐦𝐞𝐭𝐞𝐫 𝐰𝐡𝐞𝐫𝐞 𝐢𝐭 𝐛𝐞𝐥𝐨𝐧𝐠𝐬.

Ready to build an 𝐀𝐈 𝐚𝐜𝐜𝐞𝐩𝐭𝐚𝐛𝐥𝐞 𝐮𝐬𝐞 𝐩𝐨𝐥𝐢𝐜𝐲 that works for your team? That conversation is worth having now.

------------------------------------------------------------------------------------
🧾 Read the June newsletter “𝐇𝐨𝐰 𝐀𝐈 𝐚𝐦𝐩𝐥𝐢𝐟𝐢𝐞𝐬 𝐞𝐱𝐢𝐬𝐭𝐢𝐧𝐠 𝐭𝐡𝐫𝐞𝐚𝐭𝐬 𝐭𝐨 𝐲𝐨𝐮𝐫 𝐛𝐮𝐬𝐢𝐧𝐞𝐬𝐬” to learn more about how AI increases the risk to your business: https://www.linkedin.com/pulse/how-ai-amplifies-existing-threats-your-business-patrick-rost-cissp-b8aoc
------------------------------------------------------------------------------------

06/23/2026

Vulnerability exploitation is responsible for 𝟗% 𝐨𝐟 𝐜𝐨𝐧𝐟𝐢𝐫𝐦𝐞𝐝 𝐛𝐫𝐞𝐚𝐜𝐡𝐞𝐬, and the trend is moving in the wrong direction.

AI-assisted tools identify weaknesses faster than ever and lower the technical barrier enough that less skilled actors can launch effective attacks. Microsoft's Patch Tuesday releases have grown longer, with more patches rated critical. 𝐄𝐯𝐞𝐫𝐲 𝐝𝐞𝐥𝐚𝐲 𝐢𝐬 𝐚𝐧 𝐨𝐩𝐞𝐧 𝐰𝐢𝐧𝐝𝐨𝐰.

The 𝘣𝘦𝘴𝘵 𝘱𝘳𝘢𝘤𝘵𝘪𝘤𝘦 𝘩𝘢𝘴𝘯'𝘵 𝘤𝘩𝘢𝘯𝘨𝘦𝘥. The urgency has.

Prioritize patches rated critical or high, evaluate within 24 hours of release, and apply those affecting internet-facing systems first. The question for SMBs isn't whether vulnerabilities exist in their systems. It's whether there's a process to act 𝐛𝐞𝐟𝐨𝐫𝐞 𝐚𝐭𝐭𝐚𝐜𝐤𝐞𝐫𝐬 𝐝𝐨.

What does your current 𝐩𝐚𝐭𝐜𝐡 𝐫𝐞𝐯𝐢𝐞𝐰 𝐩𝐫𝐨𝐜𝐞𝐬𝐬 look like?

------------------------------------------------------------------------------------
🧾 Read the June newsletter “𝐇𝐨𝐰 𝐀𝐈 𝐚𝐦𝐩𝐥𝐢𝐟𝐢𝐞𝐬 𝐞𝐱𝐢𝐬𝐭𝐢𝐧𝐠 𝐭𝐡𝐫𝐞𝐚𝐭𝐬 𝐭𝐨 𝐲𝐨𝐮𝐫 𝐛𝐮𝐬𝐢𝐧𝐞𝐬𝐬” to learn more about how AI increases the risk to your business: https://www.linkedin.com/pulse/how-ai-amplifies-existing-threats-your-business-patrick-rost-cissp-b8aoc
------------------------------------------------------------------------------------

06/18/2026

Stolen passwords still open most doors. And AI is making them easier to steal.

Compromised credentials are responsible for 𝟏𝟎% 𝐨𝐟 𝐜𝐨𝐧𝐟𝐢𝐫𝐦𝐞𝐝 𝐛𝐫𝐞𝐚𝐜𝐡𝐞𝐬, with an average cost of $𝟒.𝟔𝟕𝐌 per incident and a mean time to identify and contain of 𝟐𝟒𝟔 𝐝𝐚𝐲𝐬. That's eight months of undetected access.

Compromised credentials aren't a new problem. AI makes them 𝘦𝘢𝘴𝘪𝘦𝘳 𝘵𝘰 𝘴𝘵𝘦𝘢𝘭 𝘢𝘯𝘥 𝘩𝘢𝘳𝘥𝘦𝘳 𝘵𝘰 𝘥𝘦𝘧𝘦𝘯𝘥 𝘢𝘨𝘢𝘪𝘯𝘴𝘵.

Automated tools attempt passwords faster than ever. AI uses publicly available personal details to make smarter guesses. One exposed credential can unlock everything when MFA isn't in place.

The fix is straightforward: a business-provided 𝘱𝘢𝘴𝘴𝘸𝘰𝘳𝘥 𝘮𝘢𝘯𝘢𝘨𝘦𝘳 for every employee, and 𝘔𝘍𝘈 required on every sensitive account. Not encouraged. Not optional. 𝐑𝐞𝐪𝐮𝐢𝐫𝐞𝐝.

Does your organization 𝐫𝐞𝐪𝐮𝐢𝐫𝐞 𝐌𝐅𝐀 across all critical systems?

------------------------------------------------------------------------------------
🧾 Read the June newsletter “𝐇𝐨𝐰 𝐀𝐈 𝐚𝐦𝐩𝐥𝐢𝐟𝐢𝐞𝐬 𝐞𝐱𝐢𝐬𝐭𝐢𝐧𝐠 𝐭𝐡𝐫𝐞𝐚𝐭𝐬 𝐭𝐨 𝐲𝐨𝐮𝐫 𝐛𝐮𝐬𝐢𝐧𝐞𝐬𝐬” to learn more about how AI increases the risk to your business: https://www.linkedin.com/pulse/how-ai-amplifies-existing-threats-your-business-patrick-rost-cissp-b8aoc
------------------------------------------------------------------------------------

06/16/2026

Myth: " 𝐁𝐚𝐝 𝐞𝐦𝐚𝐢𝐥𝐬 𝐚𝐫𝐞 𝐞𝐚𝐬𝐲 𝐭𝐨 𝐬𝐩𝐨𝐭."

That used to be true. Grammar errors, generic greetings, and awkward phrasing were reliable red flags. In many cases 𝐆𝐞𝐧𝐞𝐫𝐚𝐭𝐢𝐯𝐞 𝐀𝐈 𝐡𝐚𝐬 𝐞𝐥𝐢𝐦𝐢𝐧𝐚𝐭𝐞𝐝 𝐭𝐡𝐞𝐦.

Phishing is now the #𝟏 𝐢𝐧𝐢𝐭𝐢𝐚𝐥 𝐚𝐭𝐭𝐚𝐜𝐤 𝐯𝐞𝐜𝐭𝐨𝐫, present in 𝟏𝟔% 𝐨𝐟 𝐜𝐨𝐧𝐟𝐢𝐫𝐦𝐞𝐝 𝐛𝐫𝐞𝐚𝐜𝐡𝐞𝐬.

Phishing isn't a new problem. AI makes it 𝘴𝘪𝘨𝘯𝘪𝘧𝘪𝘤𝘢𝘯𝘵𝘭𝘺 𝘩𝘢𝘳𝘥𝘦𝘳 𝘵𝘰 𝘥𝘦𝘵𝘦𝘤𝘵 𝘶𝘴𝘪𝘯𝘨 𝘵𝘩𝘦 𝘰𝘭𝘥 𝘳𝘶𝘭𝘦𝘴.

AI tools generate polished, personalized messages in minutes. Voices can be cloned. Video can be fabricated. The hallmarks employees were trained to spot no longer apply.

The fix isn't better spam filters alone. It's 𝐮𝐩𝐝𝐚𝐭𝐞𝐝 𝐭𝐫𝐚𝐢𝐧𝐢𝐧𝐠 that reflects what AI-enhanced phishing actually looks like, combined with a culture where employees report suspicious messages without hesitation.

When did your team 𝐥𝐚𝐬𝐭 𝐮𝐩𝐝𝐚𝐭𝐞 𝐢𝐭𝐬 𝐩𝐡𝐢𝐬𝐡𝐢𝐧𝐠 𝐚𝐰𝐚𝐫𝐞𝐧𝐞𝐬𝐬 training?

------------------------------------------------------------------------------------
🧾 Read the June newsletter “𝐇𝐨𝐰 𝐀𝐈 𝐚𝐦𝐩𝐥𝐢𝐟𝐢𝐞𝐬 𝐞𝐱𝐢𝐬𝐭𝐢𝐧𝐠 𝐭𝐡𝐫𝐞𝐚𝐭𝐬 𝐭𝐨 𝐲𝐨𝐮𝐫 𝐛𝐮𝐬𝐢𝐧𝐞𝐬𝐬” to learn more about how AI increases the risk to your business: https://www.linkedin.com/pulse/how-ai-amplifies-existing-threats-your-business-patrick-rost-cissp-b8aoc
------------------------------------------------------------------------------------