Geostream Solutions

If an AI reads your business email, this is for you. ⚠️

1. The most dangerous email is not written for a human. Plugging AI into the inbox is powerful, and it opens a door most businesses have not heard of yet.

2. How it works: AI assistants follow written instructions, and email lets strangers send them. Attackers hide instructions for the AI inside an ordinary-looking message. The reader sees a normal email; the assistant sees orders. That is prompt injection.

3. Proof it is real: EchoLeak. One crafted email could make Microsoft 365 Copilot hand over internal files, with nobody clicking anything. Severity 9.3 out of 10, patched before known harm, but the method keeps resurfacing in new forms.

4. The guardrails: limit what the assistant can read, keep a human approving anything it sends or deletes, patch on discipline, allow no unvetted plugins, and make sure your AI policy covers assistants.

5. The point: AI in the inbox is a deployment decision, not a toggle. That deliberate deployment is exactly what we do for clients.

Worth checking today: has an AI quietly arrived in your inbox by default?

Still got Windows 10 machines in the business? The cheap year is nearly over. 🗓️

Support ended last October, and the Extended Security Updates that kept old machines patched get twice as expensive after 13 October. Waiting does not make the decision cheaper, it just removes your options.

The calm version of this, done in September:

✅ List every Windows 10 machine you still have
✅ Upgrade the ones that can take Windows 11
✅ Budget replacements for the ones that cannot
✅ Keep paid updates only for machines that truly need more time

How many Windows 10 PCs are still running in your business?

Heads-up if your business signs in with Microsoft: text-message login codes are being retired 🔑

From September, passkeys become the default way to sign in. And from 1 February 2027, SMS and voice codes are switched off entirely.

Don't worry, this is a good change. A passkey is simply your face, fingerprint or device PIN:

✅ Nothing to remember or type

✅ Nothing for criminals to steal or phish

✅ One tap, faster than waiting for a text

Worth doing this month: try a passkey on one account, and find out who in your team still relies on text codes so the switch-off never catches you out.

Have you tried passkeys yet? How are you finding them? Tell us below 👇

A heads-up for local manufacturers 🏭

Police figures show manufacturing files more ransomware reports than any other UK industry: 42 of 323 cases in a year. Criminals target production because downtime costs money by the minute, and that pressure makes firms more likely to pay.

Three things that protect a factory better than anything else:

✅ Keep production systems separated from office computers, so one bad email can't stop a line

✅ Test-restore your backups and time it, so you know your real recovery time before you need it

✅ Train the office team. Fake invoices and spoofed supplier emails are still how most attacks start

We work with manufacturers across Nottinghamshire, the UK and globally, and we plan IT work around production schedules rather than against them. Message us for a manufacturing IT review.

Would you know if your work passwords were for sale online? 🕵️

There are over 15 billion stolen logins on dark web marketplaces right now. Criminals don't need to break into systems when they can buy a working password for less than a takeaway.

The risky bit for small businesses is password reuse. If someone on your team used their work password on a shopping site that got breached, that login could be sitting in a criminal marketplace today.

What helps:

🔑 A password manager, so nobody reuses passwords.

🔐 MFA switched on everywhere, especially email

👀 Dark web monitoring, which watches breach dumps for your company's email addresses and alerts you the moment something appears

Curious what's out there for your business? We offer a FREE dark web exposure check and talk you through the results and what steps to take. DM us.

Everyone's talking about AI. Very few local businesses know where to start with it. Here's our advice 👇

🎯 Start with the boring jobs. Email drafts, meeting summaries, first versions of quotes. That's where AI saves hours, not in some grand project.

🗂️ Tidy your data first. Tools like Microsoft Copilot can see whatever your staff can see. If permissions are messy, sort that before switching AI on.

📝 Give your team simple rules. AI policy: what can go into AI tools, what needs checking, what stays private.

Get those three right and AI becomes a genuinely useful assistant rather than a risky experiment.

Not sure where your business stands? Our AI Readiness Assessment gives you a plain-English picture of what would help, what wouldn't, and what to sort first.

Link in the comments 👇

A heads-up for anyone whose business runs on Microsoft 365 👇

You've probably been told that multi-factor authentication (MFA) keeps your accounts safe. It helps enormously — but criminals have now built phishing kits designed specifically to get past it.

The scam is worryingly slick: a fake login page sits between your member of staff and the real Microsoft sign-in. They enter their password, approve the MFA prompt on their phone as usual… and the attacker silently captures the logged-in session. No alarms, no red flags.

The good news? A few sensible steps make a big difference:

✅ Move to phishing-resistant sign-ins — passkeys and security keys can't be fooled by fake pages

✅ Limit logins to company-managed devices

✅ Train your team to stop and check when a sign-in prompt or "device code" appears that they weren't expecting

We call that last one the Human Firewall — and it's often the best value security upgrade a small business can make.

Nothing beats walking into the office to a box of Krispy Kreme as a thank you from a customer 🍩

These little gestures go a long way. Big thanks to the local customer who dropped these off at our Mansfield office today. It’s really appreciated by the whole team at Geostream.

Happy Friday everyone.

Actions speak louder than words.