Where To Start, Inc.

Where To Start, Inc. Support and Services. Where To Start is the home of RASM™ and RASMcare™, where we Solve Business Challenges with Proactive I.T.

At Where To Start, we focus on:
✔ Saving our clients’ Money
✔ Helping our clients Make more Money
✔ Reduce Risk for our clients

We Solve Business Challenges with Proactive I.T. At Where To Start, we focus on:
✔ Saving our clients’ money
✔ Helping our clients Make more money
✔ Reduce Risk for our clients

We deliver this via our RASMcare™ Managed I.T. Services and Processes, and RASM™ is an acro

nym we have created to guide us as we apply this to your organization:

Reliability results from increased
Accountability, the application of simple & reasonable
Security precautions and proactive
Management of your systems within your environment

If your business website runs on WordPress, here’s a quick check for you 🔎There’s a popular plugin called Quiz and Surve...
05/31/2026

If your business website runs on WordPress, here’s a quick check for you 🔎

There’s a popular plugin called Quiz and Survey Master (QSM).

It’s used by more than 40,000 websites to create quizzes, surveys and forms without needing any coding.

Unfortunately, versions 10.3.1 and older were recently found to have a serious security flaw.

The issue is what’s known as an SQL injection vulnerability.

SQL is the language used to talk to a website’s database, the part that stores things like user accounts, submissions, and other important data.

An SQL injection flaw means someone can sneak malicious commands into that database.

In this case, any logged-in user, even someone with a basic subscriber account, could potentially inject commands into the system.

That could allow actions like:

🚫 Accessing sensitive data
🚫 Extracting information from the database
🚫 Manipulating content

The vulnerability is tracked as CVE-2025-67987, and it was fixed in version 10.3.2.

The latest version available is 10.3.5, which is the safest bet.

Based on WordPress.org data, just over half of websites using QSM are on version 10.3. That means a large number are likely still vulnerable.

That’s potentially tens of thousands of sites.

Right now, there’s no confirmed evidence of this flaw being actively exploited. But once a vulnerability is public, attackers often start scanning the internet looking for unpatched sites.

👉 If your site uses this plugin, the solution is straightforward: Update it immediately 👈

More broadly, this is a reminder of something I say often to business owners: WordPress itself isn’t usually the weak link. It’s the plugins.

Every plugin you install adds functionality but also adds potential risk.

If you’re not actively using a plugin or theme, it shouldn’t just be deactivated. It should be deleted from the server completely.

Websites aren’t a set and forget asset. They’re part of your digital infrastructure.

If they’re vulnerable, they can become an entry point into your wider systems. Especially if admin accounts reuse passwords across services.

❓ When was the last time someone checked which plugins your website is running and whether they’re fully up to date?

If you’ve ever tried to get an AI tool to understand a whole project instead of just one document, you’ll appreciate thi...
05/30/2026

If you’ve ever tried to get an AI tool to understand a whole project instead of just one document, you’ll appreciate this…

Microsoft has introduced something called Copilot Agents in OneDrive.

And this is where AI starts to feel a bit more useful for real-world business work 🤖

Here’s the problem it’s trying to solve.

Normally, if you ask Copilot to summarize or analyze something, you’re doing it one file at a time. One Word document. One spreadsheet. One PowerPoint.

But projects don’t live in one file.

They live across proposals, meeting notes, budgets, timelines, research documents, and email summaries.

With OneDrive Agents, you can now select up to 20 related files and bundle them together into what’s saved as a .agent file.

Instead of asking: “Summarize this file…”

You can ask: “What deadlines are coming up across this whole project?”

“Where are the risks?”

“What did we agree in the last three meetings?”

And it has the context of all the selected files, not just one.

The agent behaves like other AI tools. It can summarize, answer questions, surface key points. But it’s operating with a broader understanding.

Even better, these agents are saved as files inside OneDrive.

That means you can share the .agent file with colleagues. They don’t need to recreate the setup themselves. You’re all working from the same AI “view” of the project.

As projects evolve, you can add or remove documents from the agent or refine the instructions it uses.

It stays aligned with the latest information instead of becoming outdated.

Right now, this feature is available to people with a Microsoft 365 Copilot license accessing OneDrive via the web.

It’s clearly still evolving. Microsoft is asking for feedback, which suggests it’s watching closely to see how businesses use it.

From a business owner’s perspective, the real value is reducing the time spent hunting across folders, trying to piece together context.

If AI can help you understand a whole project in one place instead of ten separate files, that’s meaningful productivity.

🤔 The question is, would you trust an AI agent to interpret multiple important documents at once, or would you still prefer to read everything yourself?

05/29/2026

Still relying on Windows 10 with Extended Security Updates?

Your safety net has an end date and it’s approaching fast.

When it disappears, so does your protection.

If Windows 10 is still part of your business setup, now’s the time to start thinking ahead…

Address

640 Masonic Way #293
Belmont, CA
94002

Opening Hours

Monday 8am - 5pm
Tuesday 8am - 5pm
Wednesday 8am - 5pm
Thursday 8am - 5pm
Friday 8am - 5pm

Alerts

Be the first to know and let us send you an email when Where To Start, Inc. posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Share