Lock the Doors: AI Security Basics for a Small Office · Lesson 1 of 7
Why the attack window shrank
15 minutes. Two numbers, one idea, and the start of your list.
---
Picture the firewall in your back closet. Its admin page has a little notice: "Firmware update available." It has said that for weeks. Nobody minds. The internet works, and the update means a reboot in the middle of the day.
That notice used to be a low-stakes chore. This fall, two of the biggest security teams in the world published numbers that change the math. This lesson explains those numbers in plain words, and then you start the one page that the rest of the course builds on.
- A flaw (security people say "vulnerability") is a mistake in software that lets someone do something they shouldn't, like get into a system without a password.
- A patch (or update) is the fix the maker releases. When it ships, the maker also publishes a notice describing the flaw.
- An exploit is a working attack that uses the flaw.
- Internet-facing means someone outside your building can reach it over the internet: your firewall, your VPN, the remote access tool your IT partner uses, your website.
- The patch window is the gap between "the fix is out" and "you installed it." That's the time you're exposed.
Here's the uncomfortable part. The notice that announces the fix is also a signal to attackers: here's a door, and here are the businesses that haven't locked it yet.
Microsoft's 2026 Digital Defense Report, covering July 2025 through June 2026, says the median time from a flaw being found in the wild to a working attack has fallen below 24 hours. The same report says companies typically take 30 to 60 days to fix critical flaws on systems that face the internet. Microsoft credits AI with giving attackers the early advantage.
Google's threat researchers found that flaws discovered by AI tools tend to be the serious kind. One flaw in BeyondTrust's remote support software, found by an AI research agent, was being used by attackers within four days of being made public. Google also counted more than 1,500 flaws disclosed this year in AI software itself, many of them in tools for building agents and running AI models.
Put those side by side. Attackers can move in about a day. A typical fix takes a month or two. A monthly or quarterly patch habit doesn't keep pace anymore.
You don't have to fix everything the same day. Most flaws are never used in an attack. Google counted 141 flaws that were disclosed and then exploited in the first eight months of 2026, about 1 in every 431 disclosed. The job isn't "patch everything instantly." It's fix the right few things fast.
The right few are the doors that face the internet. For most small offices, that's a short list:
- Your firewall or router
- Your VPN, if you have one
- Your remote access tool (the software your IT partner uses to reach your computers)
- Your website and its plugins
- Anything you log in to from outside the office that runs on your own equipment
And there's a new item on the list: AI tools that can take actions. An assistant connected to your email, an agent that can update your accounting, a chatbot tool someone set up on a work laptop. If it can do things, it needs an owner and an update routine, the same as the firewall.
I wrote about this in more depth in the Insider article [Attackers Now Move in a Day. Here Is an Update Routine That Keeps Up.](https://appliedaiinsider.com/articles/patch-window-one-day) This course turns that routine into a set of things you actually do.
- It doesn't mean buy something. You'll see ads this month for products that promise to close the window for you. Don't buy a new security product because of a headline. Turning on the updates you already have, and knowing who owns each door, is most of the job.
- It doesn't mean panic. Small offices are not usually picked out by name. They're found by scanning: an attacker looks for every device running the flawed version, wherever it is. The fix is boring: be on the current version.
- It doesn't mean stop using AI. It means treating AI tools like every other piece of software that can touch your data: listed, owned and kept current.
Open the Front-Door List template for this course.
- Fill in Part 1: Internet-facing systems. Write down everything on the short list above that your office has. If you don't know the brand of your firewall, write "firewall (brand unknown)". That's a finding, not a failure.
- Fill in Part 2: AI tools with every AI tool you know the office uses: ChatGPT, Claude, Copilot, Gemini, a note-taker in your meetings, an AI feature inside your accounting or CRM. Don't worry about the ones you don't know about yet. Lesson 5 finds those.
- Leave the "Owner" and "Update routine" columns blank for now. Lesson 2 fills them in.
Check it worked
You have one page with at least four rows in Part 1 and at least one row in Part 2. If any row says "brand unknown" or "not sure who set this up," circle it. Those circles are where you start next lesson.
---
Next: make as much of that list as possible update itself.
→ Lesson 2: Updates that run themselves