InfoSecurity Blueprint, LLC

10/09/2026

Fully patching a vulnerability already known to be exploited took a median of 43 days, nearly two weeks longer than the year before. Shorten that window by starting with internet-facing systems and the CISA Known Exploited Vulnerabilities catalog. A useful question for the IT team or provider this week: 𝐰𝐡𝐢𝐜𝐡 𝐤𝐧𝐨𝐰𝐧 𝐞𝐱𝐩𝐥𝐨𝐢𝐭𝐞𝐝 𝐯𝐮𝐥𝐧𝐞𝐫𝐚𝐛𝐢𝐥𝐢𝐭𝐢𝐞𝐬 𝐚𝐫𝐞 𝐬𝐭𝐢𝐥𝐥 𝐨𝐩𝐞𝐧 𝐭𝐨𝐝𝐚𝐲?

October is 𝘊𝘺𝘣𝘦𝘳𝘴𝘦𝘤𝘶𝘳𝘪𝘵𝘺 𝘈𝘸𝘢𝘳𝘦𝘯𝘦𝘴𝘴 𝘔𝘰𝘯𝘵𝘩. Four core steps anchor it every year, and the data keeps backing them up:
🔄 Update software
🔑 Use strong passwords and a password manager
🛡️ Turn on multifactor authentication (MFA)
🎣 Recognize and report phishing

🧾 This month's newsletter, 𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐀𝐰𝐚𝐫𝐞𝐧𝐞𝐬𝐬 𝐌𝐨𝐧𝐭𝐡 𝟐𝟎𝟐𝟔, explains why each step still matters heading into 2027 and what to add next: https://www.linkedin.com/pulse/cybersecurity-awareness-month-2026-patrick-rost-cissp-ck2oc

10/07/2026

Exploiting a software vulnerability is now the most common way attackers get into an organization, ahead of stolen credentials. That makes updates the first line of defense, not routine housekeeping. Start with internet-facing systems, the first layer an attacker meets.

October is 𝘊𝘺𝘣𝘦𝘳𝘴𝘦𝘤𝘶𝘳𝘪𝘵𝘺 𝘈𝘸𝘢𝘳𝘦𝘯𝘦𝘴𝘴 𝘔𝘰𝘯𝘵𝘩. Four core steps anchor it every year, and the data keeps backing them up:
🔄 Update software
🔑 Use strong passwords and a password manager
🛡️ Turn on multifactor authentication (MFA)
🎣 Recognize and report phishing

🧾 This month's newsletter, 𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐀𝐰𝐚𝐫𝐞𝐧𝐞𝐬𝐬 𝐌𝐨𝐧𝐭𝐡 𝟐𝟎𝟐𝟔, explains why each step still matters heading into 2027 and what to add next: https://www.linkedin.com/pulse/cybersecurity-awareness-month-2026-patrick-rost-cissp-ck2oc

10/01/2026

Check out the article " 𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐀𝐰𝐚𝐫𝐞𝐧𝐞𝐬𝐬 𝐌𝐨𝐧𝐭𝐡 𝟐𝟎𝟐𝟔" and subscribe to the "𝐈𝐧𝐟𝐨𝐒𝐞𝐜 𝐈𝐧𝐬𝐢𝐠𝐡𝐭𝐬 𝐟𝐨𝐫 𝐒𝐌𝐁𝐬" newsletter for monthly insights on how to strengthen your Information Security Program.

08/20/2026

Check out the article " 𝐖𝐡𝐞𝐫𝐞 𝐚𝐫𝐞 𝐲𝐨𝐮 𝐬𝐭𝐮𝐜𝐤?" and subscribe to the "𝐈𝐧𝐟𝐨𝐒𝐞𝐜 𝐈𝐧𝐬𝐢𝐠𝐡𝐭𝐬 𝐟𝐨𝐫 𝐒𝐌𝐁𝐬" newsletter for monthly insights on how to strengthen your Information Security Program.

Business owners get security advice from many sources: your insurer sees the questionnaire, your MSP sees the network, a vendor sees the gap their product fills. Three partial answers at once sound like noise.

08/12/2026

The Greater Olean Area Chamber of Commerce is excited to announce that this month’s installment of the Virtual Lunch & Learn Series will be with InfoSecurity Blueprint, LLC. Owner Patrick Rost will present, “The AI Conversation You Should Have Had Six Months Ago.”

To sign up for this Virtual Lunch & Learn, please use this link: https://us06web.zoom.us/webinar/register/WN_BIeY9V0WRfqtWfP_et0CkQ #/registration, email [email protected], or call 716-372-4433.

07/20/2026

Don't forget to stop in Wednesday morning!

07/15/2026

Check out the article "𝟐𝟎𝟐𝟔: 𝐈𝐬 𝐘𝐨𝐮𝐫 𝐏𝐥𝐚𝐧 𝐨𝐧 𝐒𝐜𝐡𝐞𝐝𝐮𝐥𝐞?" and subscribe to the "𝐈𝐧𝐟𝐨𝐒𝐞𝐜 𝐈𝐧𝐬𝐢𝐠𝐡𝐭𝐬 𝐟𝐨𝐫 𝐒𝐌𝐁𝐬" newsletter for monthly insights on how to strengthen your Information Security Program.

January’s newsletter “2026: Take your next step to be secure” set the challenge of “wash your first dish” to begin implementing an information security program. Also in that edition was an example timeline of tasks.

07/15/2026

Scam Prevention for Small Businesses & Individuals

📆 Wednesday July 22
⏰ 9am - 11am
📍 The Hatch SUNY JCC

The Hatch at JCC in partnership with InfoSecurity Blueprint, LLC is offering a free session to the community at The Hatch Cafe. Patrick Rost will present valuable information on avoiding current and common scams. Arm yourself with the information you need to protect yourself and your business!

Call or email to register and have an opportunity to submit questions in advance. Patrick will provide answers during the session.
📞 716-376-7506
💻 [email protected]

06/25/2026

Most AI data leaks don't involve an outside attacker. They involve an employee using an unapproved tool to get work done faster.

𝐒𝐡𝐚𝐝𝐨𝐰 𝐀𝐈 𝐰𝐚𝐬 𝐚 𝐟𝐚𝐜𝐭𝐨𝐫 𝐢𝐧 𝟏 𝐢𝐧 𝟓 𝐛𝐫𝐞𝐚𝐜𝐡𝐞𝐬, adding an average of $670,000 to breach costs. Sensitive business data, client records, internal documents: all of it can enter platforms the business knows nothing about. When employees use free AI tools, that data may also be used to train the model.

Data exfiltration isn't a new problem. 𝘜𝘯𝘴𝘢𝘯𝘤𝘵𝘪𝘰𝘯𝘦𝘥 𝘈𝘐 𝘵𝘰𝘰𝘭𝘴 𝘩𝘢𝘷𝘦 𝘤𝘳𝘦𝘢𝘵𝘦𝘥 𝘢 𝘯𝘦𝘸 𝘤𝘩𝘢𝘯𝘯𝘦𝘭 𝘮𝘰𝘴𝘵 𝘱𝘰𝘭𝘪𝘤𝘪𝘦𝘴 𝘥𝘰𝘯'𝘵 𝘺𝘦𝘵 𝘤𝘰𝘷𝘦𝘳.

A starting framework:
🔍 Audit which AI tools employees are currently using
🚫 Block unapproved platforms at the firewall
✅ Provide an approved AI solution with a business license
📋 Document acceptable use in a formal AI policy

The goal isn't to block productivity. It's to keep sensitive data 𝐢𝐧𝐬𝐢𝐝𝐞 𝐭𝐡𝐞 𝐩𝐞𝐫𝐢𝐦𝐞𝐭𝐞𝐫 𝐰𝐡𝐞𝐫𝐞 𝐢𝐭 𝐛𝐞𝐥𝐨𝐧𝐠𝐬.

Ready to build an 𝐀𝐈 𝐚𝐜𝐜𝐞𝐩𝐭𝐚𝐛𝐥𝐞 𝐮𝐬𝐞 𝐩𝐨𝐥𝐢𝐜𝐲 that works for your team? That conversation is worth having now.

------------------------------------------------------------------------------------
🧾 Read the June newsletter “𝐇𝐨𝐰 𝐀𝐈 𝐚𝐦𝐩𝐥𝐢𝐟𝐢𝐞𝐬 𝐞𝐱𝐢𝐬𝐭𝐢𝐧𝐠 𝐭𝐡𝐫𝐞𝐚𝐭𝐬 𝐭𝐨 𝐲𝐨𝐮𝐫 𝐛𝐮𝐬𝐢𝐧𝐞𝐬𝐬” to learn more about how AI increases the risk to your business: https://www.linkedin.com/pulse/how-ai-amplifies-existing-threats-your-business-patrick-rost-cissp-b8aoc
------------------------------------------------------------------------------------

06/23/2026

Vulnerability exploitation is responsible for 𝟗% 𝐨𝐟 𝐜𝐨𝐧𝐟𝐢𝐫𝐦𝐞𝐝 𝐛𝐫𝐞𝐚𝐜𝐡𝐞𝐬, and the trend is moving in the wrong direction.

AI-assisted tools identify weaknesses faster than ever and lower the technical barrier enough that less skilled actors can launch effective attacks. Microsoft's Patch Tuesday releases have grown longer, with more patches rated critical. 𝐄𝐯𝐞𝐫𝐲 𝐝𝐞𝐥𝐚𝐲 𝐢𝐬 𝐚𝐧 𝐨𝐩𝐞𝐧 𝐰𝐢𝐧𝐝𝐨𝐰.

The 𝘣𝘦𝘴𝘵 𝘱𝘳𝘢𝘤𝘵𝘪𝘤𝘦 𝘩𝘢𝘴𝘯'𝘵 𝘤𝘩𝘢𝘯𝘨𝘦𝘥. The urgency has.

Prioritize patches rated critical or high, evaluate within 24 hours of release, and apply those affecting internet-facing systems first. The question for SMBs isn't whether vulnerabilities exist in their systems. It's whether there's a process to act 𝐛𝐞𝐟𝐨𝐫𝐞 𝐚𝐭𝐭𝐚𝐜𝐤𝐞𝐫𝐬 𝐝𝐨.

What does your current 𝐩𝐚𝐭𝐜𝐡 𝐫𝐞𝐯𝐢𝐞𝐰 𝐩𝐫𝐨𝐜𝐞𝐬𝐬 look like?

------------------------------------------------------------------------------------
🧾 Read the June newsletter “𝐇𝐨𝐰 𝐀𝐈 𝐚𝐦𝐩𝐥𝐢𝐟𝐢𝐞𝐬 𝐞𝐱𝐢𝐬𝐭𝐢𝐧𝐠 𝐭𝐡𝐫𝐞𝐚𝐭𝐬 𝐭𝐨 𝐲𝐨𝐮𝐫 𝐛𝐮𝐬𝐢𝐧𝐞𝐬𝐬” to learn more about how AI increases the risk to your business: https://www.linkedin.com/pulse/how-ai-amplifies-existing-threats-your-business-patrick-rost-cissp-b8aoc
------------------------------------------------------------------------------------