Comserv Connect

Comserv Connect Staten Island managed IT, cybersecurity & AI enablement for NYC & NJ businesses. 24/7 help desk, MXDR/SOC security, cloud, VoIP. HIPAA & SOC 2–aligned support.

Free strategy call: (347) 273-1200. When it comes to biz tech, we have our clients back. We keep you in touch with clients, help you collaborate, and keep your data safe.

10/02/2026

What exactly does the bot have access to after you install it?

Nobody reads that screen. So we filmed it.

It's Cybersecurity Awareness Month. Instead of thirty days of "use a strong password," we're running Be Like Bob all October: short videos about the ways a small business actually gets compromised.

No hacker in this one.

Meet Bob. HVAC guy. Busy month. An AI assistant pops up on his work computer offering to handle his scheduling and his email. He installs it. Takes a minute.

Then watch what it asks for.

Every line scrolling past is copied straight off a real permission screen. We didn't write a word of it.

It's not just what the bot can do on that computer. It's where your stuff ends up. Your customer list. Your invoices. Your email. One line says it "can share your name, contacts, files and info you might find sensitive."

And there's a mode you can switch on that goes further. Their words: it "has access to the same sites you do, including the ones you're signed into," and it "signs you in to sites."

You turn that one on yourself. Worth reading twice first, because the sites you're signed into include your bank, your payroll and every vendor portal you use.

He clicked yes on a Tuesday like any of us would. But Bob's the admin, not because anybody trained him, because nobody else was doing it. So that one yes covered every computer in the shop.

No firewall got touched. Nobody picked a lock. The data walked out the front door with permission.

Install AI. We're not telling you not to, we sell it. Just protect your data while you do it.

Be like Bob and call us before you install the next one.

Full write-up in the comments.

comservconnect.com

09/07/2026

⭐️ Happy Labor Day!

Today, we celebrate the hard work, dedication, and contributions of workers who keep our businesses, communities, and country moving forward.

Take today to relax, recharge, and enjoy the people who matter most.

Happy Labor Day from all of us at Comserv Connect! 🗽

09/03/2026

If your business renews its general liability policy this year, there may be a new paragraph in it about artificial intelligence.

In July 2025 Verisk filed new generative AI exclusion endorsements for the ISO commercial general liability program, with a proposed effective date of 1/1/2026. They are optional for a carrier to attach, so nothing happens to a policy automatically. What matters is what your carrier chose to attach at renewal.

Look at which policy this lands on. General liability is the one most businesses already carry. Cyber is the separate policy only some buy. Across our own clients, smaller businesses generally do not carry cyber insurance at all, and general liability is the whole file. We do not sell insurance.

Renewal is when the forms get set for another term. Five questions to bring to that meeting:
https://www.comservconnect.com/blog/ai-exclusions-landed-on-general-liability?fbclid=IwY2xjawUGkypwZG9mAWV4dG4DYWVtAjEwAGJyaWQRMUoydkE4Ulg4aWQ3QmJnTlpzcnRjBmFwcF9pZBAyMjIwMzkxNzg4MjAwODkyAAEeK-x_QY1n5gkHJyMFgJB0tEzwxVbQTKrEmHXgXgtAS05W8SLLcXnVFzbacVA_aem_5cqnCkHcSs9LGIaGLNOALg

09/01/2026

A live scam call used to need a person who could hold a script. Researchers at SOCRadar documented a phishing platform that rents AI voice agents instead: one operator ran 200 calls for $19.24, about a dime each. The calls posed as Apple Support and asked people to read out their security codes. That campaign ran in Brazil. Across our own clients, we see more scam calls than a year ago, including calls that sound automated. Nothing ties those to this platform, but the report shows what running one costs.

The voice in this video is synthetic and the demonstration is ours. Apple will never ask you for your password or a verification code, and neither will your bank or your IT provider.

One rule to give your staff today: nobody from your IT provider will ever call and ask you to read out a code.

Full story: https://www.comservconnect.com/blog/a-fake-support-call-now-costs-about-a-dime

08/28/2026

If you tried Copilot early, decided it was expensive and moved on, your opinion is probably out of date.

Microsoft has taken plenty of heat on Copilot and some of it was earned. We wrote Monday about the features it just retired. This is the other half.

Across our own clients, almost nobody had built anything on the features that went. Meanwhile the part people actually use has got noticeably better.

The specific thing that changed for us: it assembles a picture of a person. Ask what is going on with a particular client, and it pulls together what they have said across Teams and Outlook, then tells you where things stand and what you have not answered. That is a job we used to do by hand, badly.

That is our experience of it. Whether it lands the same way for you depends on how much of your work arrives as a conversation with a person.

On price. Copilot Business is an add-on on top of a plan you already pay for. List is $21 per user per month paid yearly. There is a promotional $18 running to December 31, but it requires an annual commitment and applies to the first year only, then $21.

The number we would point you at is the monthly one. $25.20 per user per month, no annual commitment. If you do not know whether it is worth it, paying a premium to find out over two months on three seats beats locking in a year to save three dollars a seat.

If you are a nonprofit, there is no nonprofit price for this one. Everybody pays the same.

Full piece: https://www.comservconnect.com/blog/copilot-second-look

08/27/2026

Tuesday, we spent the day on the course for A Very Special Place, Inc. 37th Annual Special Strokes for Special Folks Golf Outing. We're proud to say Comserv Connect was recognized with an award for our continued support of AVSP's mission.

Beautiful weather, a great turnout, and a good reminder of why we show up for organizations doing real work in our community. Thank you to AVSP for the recognition, and to everyone who came out to support such a great cause.

08/26/2026

If a Pokémon Center order was cancelled on you this month, the email blamed an unforeseen fulfillment issue.

It was a cyberattack. Not on Pokémon.

In the UK and Germany, Pokémon Center does not pack and ship its own orders. A logistics firm called CEVA Logistics does. CEVA was attacked, and customers were then told their names, addresses, phone numbers, emails and the contents of their orders had been exposed.

Every one of those customers chose Pokémon. Not one of them chose CEVA. Most had never heard the name until they read the notification.

Days earlier, Trezor said 13,689 of its customers had details exposed. Trezor was not breached either. Its shipping provider was.

The usual advice is to know your vendors. Good advice, and it would not have helped here. Both companies could name their vendor. The break was one layer down. Your contracts cover the companies you chose, not the companies your companies chose.

You are not going to audit your suppliers' suppliers, and we are not going to pretend otherwise.

But there is one question worth asking whichever vendor holds the most customer data for you. When one of your suppliers is breached, how and when do we find out?

That is a phone call, not a project. A vendor who has thought about it will describe their process. A vendor who has not will change the subject.

The full version, including what you can look up for free today: https://www.comservconnect.com/blog/the-layer-below-your-vendor-list

08/26/2026

On September 1, more than 500 films come out of people's UK PlayStation libraries. Films they bought, not rented. Sony's licensing deal with StudioCanal expired, and no refunds have been announced.

Microsoft retired Copilot features this month. Group chats, podcasts and Deep Research went on August 18. Copilot Labs and the animated assistant are going too, but account by account, with no fixed date. Anything not saved first may not be there afterward.

OpenAI shut the Sora app in April.

Different companies, same shape. Access to something you made or paid for gets cut, and the only notice is a support page nobody reads.

That matters more now, because your team is making things inside these tools. Prompts, drafts, research, a whole way of working that lives nowhere else.

To be fair to Copilot, if you are already on Microsoft 365 it is worth testing. It is very good at reading back a year of your email to work out where a conversation stands and what is still unanswered.

The point is not which tool you buy. It is keeping your own copy of anything that only lives inside one.

Across our own clients we see fewer businesses on Copilot than on ChatGPT or Claude, in a mix of personal accounts and team accounts.

Want a hand working out what your team is actually on? Book a free 30-minute strategy session: https://www.comservconnect.com/free-strategy-call

08/21/2026

A lot has changed in 12 months. Thanks to the Staten Island Chamber of Commerce staff as well as the business and nonprofit leaders that took the time to attend, learn and share.

Reach out to us to speak about AI in your organization and how we may be able to help.

https://www.comservconnect.com/free-strategy-call

If you run a nonprofit, this is the one to read this week.A company that makes donor-database software was breached. Mor...
08/21/2026

If you run a nonprofit, this is the one to read this week.

A company that makes donor-database software was breached. More than a thousand charities were affected, and the attacker appears to have taken everything in the database. Names, phone numbers, emails, addresses. No bank or card details.

Here is the uncomfortable part. Those charities did nothing wrong. The data was never on their computers. There was no update they missed, no setting they should have changed, no training that would have stopped it.

What is theirs is the phone call. Donors are not going to ring the software company. They are going to ring the charity.

One thing worth doing this week. Write down every outside company that holds a donor record for you, and who owns that relationship. If you cannot finish the list, that is the finding.

The full write-up: https://www.comservconnect.com/blog/your-donor-list-lives-somewhere-else

Address

1110 South Avenue
New York, NY
10314

Alerts

Be the first to know and let us send you an email when Comserv Connect posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Contact The Business

Send a message to Comserv Connect:

Shortcuts

Share