AI is getting cheaper, but security is now on you — 3 practical steps this week
A knowledge wiki built with Claude, model routing through OpenRouter, and a hidden attack in Copilot Word files — what small businesses can use and what they need to guard against.
Summary
- Knowledge wiki with LLMs — Casey Newton describes how Claude/ChatGPT + Obsidian brings scattered notes into one searchable place. A free tool + €18/mo = a working method
- Stripe buys OpenRouter for $7B — a signal that multi-model routing is becoming standard. For small businesses this means lower AI costs through one integration
- Copilot vulnerability in Word files — researchers showed that hidden white text can make Copilot follow foreign instructions. If you use Copilot on documents from outsiders, this is a real risk
Bottom line: AI is getting cheaper and more accessible, but security and control over your own knowledge are now on you — not the vendor.
1. A knowledge wiki with Claude — turn scattered notes into a searchable base
What changed. Platformer’s Casey Newton described how he adapted Andrej Karpathy’s (former Tesla AI head) idea of a personal LLM wiki. Each morning a script runs Claude across new notes and arranges them in a single structured knowledge base — people, companies, concepts.
What it means for a small business. If you run a small accounting practice, client conversations, document samples, and old Q&A usually live in email, WhatsApp, and your head. A year later, you no longer remember what a particular client asked last December about VAT. This technique lets Claude find it in 5 seconds, provided the notes are in one folder.
What you can do this week.
- Install Obsidian — a free notes tool that saves files as plain text on your computer. ~5 min install
- Create one folder with 3-5 existing documents about a client or project
- Paste all the text into Claude/ChatGPT and ask: “Organise this material in wiki format — a separate page for each person, company, project.” Claude Pro is €18/mo, ChatGPT Plus €22/mo
- For 1 week, drop everything — email replies, meeting notes, client questions — into one folder. Once a week, ask Claude to organise it
What to watch.
- Obsidian is integrating several AI helpers this year — expect no-terminal solutions in the coming months
- Google, Notion, and Microsoft have all promised similar “personal context” features in their tools — check whether the tool you already use adds it first
2. Stripe buys OpenRouter for $7B — AI gets cheaper for small businesses
What changed. Payments giant Stripe acquired OpenRouter for $7 billion. OpenRouter is a platform that gives access to 500+ AI models (Claude, GPT, Gemini, Llama, and more) through one API and automatically routes tasks to the cheapest suitable model. The company’s annualized run rate is ~$140M.
What it means for a small business. If you pay for ChatGPT or Claude, you pay one fixed price for one model. But not every task needs a top model — a simple email draft works with one that costs 10× less. OpenRouter does this automatically. If you run a small online store with AI customer support, costs can drop by 40-70% without changing output quality.
What you can do this week.
- If you only use AI through a chat interface — you can skip this, it’s not relevant yet
- If you use AI in some automation (n8n, Make, Zapier) — openrouter.ai lets you test with a $10 credit. Sign up, get an OpenAI-compatible API key, swap the existing one, and watch costs drop
- If you’re considering AI adoption — start with OpenRouter, not a single-vendor API. You avoid getting locked in
- Compare your current monthly AI costs with what the OpenRouter calculator shows — you get a concrete number
What to watch.
- Stripe integration means AI bills will appear in the Stripe dashboard in the coming months — in one place with your other business payments
- Expect competitors (Google, AWS Bedrock) to cut prices — check aggregate pricing changes monthly
3. Microsoft Copilot vulnerability — a foreign Word file can hijack your assistant
What changed. Researchers proved that a Word document can hide an attack — white text on a white background. When you ask Copilot to process it, Copilot reads the hidden instructions too and follows them. An attacker can make Copilot send your emails, pull files from Google Drive, or embed hidden instructions in new documents you create. Microsoft tagged this as CVE-2026-24301, severity 8.8/10.
What it means for a small business. If you run a 5-person law firm and use Microsoft 365 Copilot to process client-submitted contracts, this is a real risk. A client can send a Word file with hidden text, and your Copilot could unknowingly send that client’s email history to a stranger’s address. According to researchers, “there is no complete mitigation” — the problem affects all large-model assistants.
What you can do this week.
- Check foreign files manually before running Copilot on them: open Word, select all (Ctrl+A), change font colour to black. If hidden text appears — do nothing, delete the file
- Check what Copilot sees. In Microsoft 365 settings, find “Copilot connectors” — turn off any you don’t actually use (Gmail, Drive, calendar). Less access, less damage
- If you use ChatGPT or Claude the same way — same principles: don’t give them access to your inbox and files “just in case.” Only for a specific task
- Instruct your team: never paste foreign file text directly into an AI chat without checking first
What to watch.
- Microsoft has promised fixes in coming weeks — follow Microsoft 365 admin notifications
- This isn’t a one-off — expect similar discoveries in other AI assistants over the next months
Today’s picture
Three stories today say one thing: AI is becoming more accessible and cheaper, but responsibility for what it does is shifting to you. The wiki method gives you control over your information. Model routing via OpenRouter gives you control over costs. The Copilot incident shows security around AI is also yours — not the vendor’s — responsibility. For a small business this means moving from “I use what Microsoft/Google/OpenAI give me” to “I choose and configure what I need.”
| Event | Consequence |
|---|---|
| Casey Newton’s LLM wiki technique | Personal knowledge base available under €20/mo |
| Stripe buys OpenRouter for $7B | AI costs can drop 40-70% with one integration |
| Copilot CVE-2026-24301 hidden attack | A foreign Word file can hijack your assistant — check manually |
Three questions for the small business owner:
- Where in your business is information about clients and projects currently scattered across 5 places?
- If you use AI in some process — do you know what it costs per month and whether it can be reduced?
- Who on your team has access to Copilot or another AI assistant, and what does it see in your business?
Sources
AI news for business leaders
Twice a week: what AI news means for a small business. No hype, with concrete steps.