Stu Sjouwerman

Chief Executive Officer & President

Stu Sjouwerman (pronounced “shower-man”) is the founder and CEO of KnowBe4, Inc., which hosts the world’s most popular integrated security awareness training and simulated phishing platform, with over 54,000 organization customers and more than 50 million users. A serial entrepreneur and data security expert with 30 years in the IT industry, Stu was the co-founder of Inc. 500 company Sunbelt Software, a multiple award-winning anti-malware software company that was acquired in 2010.

Books

Cyberheist E-Book

Find all of Stu's books on Amazon

CyberheistNews Vol 14 #52 [Heads Up] Bad Actors Use Voice Phishing in Microsoft Teams To Spread Malware

Dec 24, 2024 9:00:00 AM By Stu Sjouwerman

Russia’s APT29 Launches Major Spear Phishing Campaign

Dec 23, 2024 5:14:23 PM By Stu Sjouwerman

Trend Micro warns that the Russian state-sponsored threat actor Earth Koshchei (also known as “APT29” or “Cozy Bear”) is using spear phishing emails to trick victims into connecting to ...

Mobile Phishing Attacks Use New Tactic to Bypass Security Measures

Dec 20, 2024 3:49:33 PM By Stu Sjouwerman

ESET has published its threat report for the second half of 2024, outlining a new social engineering tactic targeting mobile banking users.

Attackers Abuse HubSpot’s Free Form Builder to Craft Phishing Pages

Dec 20, 2024 3:49:08 PM By Stu Sjouwerman

A threat actor is abusing HubSpot’s Free Form Builder service to craft credential-harvesting phishing pages, according to Palo Alto Networks’ Unit 42.

AI-Powered Investment Scams Surge: How 'Nomani' Steals Money and Data

Dec 18, 2024 11:16:53 AM By Stu Sjouwerman

Cybersecurity researchers are warning about a new breed of investment scam that combines AI-powered video testimonials, social media malvertising, and phishing tactics to steal money and ...

Phishing Campaign Targets YouTube Creators

Dec 18, 2024 11:16:19 AM By Stu Sjouwerman

An email phishing campaign is targeting popular YouTube creators with phony collaboration offers, according to researchers at CloudSEK. The emails contain OneDrive links designed to trick ...

[Heads Up] Bad Actors Use Voice Phishing in Microsoft Teams To Spread DarkGate Malware

Dec 17, 2024 10:06:36 AM By Stu Sjouwerman

Threat actors are using voice phishing (vishing) attacks via Microsoft Teams in an attempt to trick victims into installing the DarkGate malware, according to researchers at Trend Micro.

U.S. Justice Department Indicts Fake IT Workers From North Korea

Dec 17, 2024 10:06:06 AM By Stu Sjouwerman

The U.S. Justice Department revealed indictments against 14 North Korean nationals for their involvement in a long-running scheme designed to pose as remote IT professionals.

Critical Infrastructure Under Siege: 42% Spike in Ransomware Attacks on Utilities

Dec 17, 2024 10:05:27 AM By Stu Sjouwerman

Ransomware attacks targeting utilities have surged by 42% over the past year, with spear phishing playing a major role in 81% of cases, according to a ReliaQuest study spanning November ...

CyberheistNews Vol 14 #51 Phishing Attacks Are Now Leveraging Google Ads to Hijack Employee Payments

Dec 17, 2024 9:00:00 AM By Stu Sjouwerman

94% of U.K. Businesses Aren’t Adequately Prepared for AI-Driven Phishing Scams

Dec 13, 2024 12:31:54 PM By Stu Sjouwerman

A new report makes it clear that U.K. organizations need to do more security awareness training to ensure their employees don’t fall victim to the evolving use of AI.

Sophisticated Phishing Campaign Attempts to Bypass SEGs

Dec 13, 2024 12:31:28 PM By Stu Sjouwerman

A widespread phishing campaign is attempting to steal credentials from employees working at dozens of organizations around the world, according to researchers at Group-IB.

Mobile Phishing Campaign Targets Job Seekers

Dec 12, 2024 11:39:42 AM By Stu Sjouwerman

Researchers at Zimperium warn that a phishing campaign is targeting Android phones to deliver the Antidot banking trojan.

Nearly Half a Billion Emails in 2024 Were Malicious

Dec 11, 2024 10:29:07 AM By Stu Sjouwerman

A new report from Hornetsecurity has found that 427.8 million emails received by businesses in 2024 contained malicious content.

Phishing Attacks Are Now Leveraging Google Ads to Hijack Employee Payments

Dec 10, 2024 10:22:34 AM By Stu Sjouwerman

Researchers at Silent Push warn that a phishing campaign is using malicious Google Ads to conduct payroll redirect scams.

Phishing Holds the Top Spot as the Primary Entry Point for Ransomware Attacks

Dec 10, 2024 10:22:17 AM By Stu Sjouwerman

New analysis of ransomware attacks shows that phishing is the primary delivery method and organizations need to offer more effective security awareness training to mitigate the threat.

CyberheistNews Vol 14 #50 Cruel Year-End Twist: When Fake Firing Is A Real Phishing Attack

Dec 10, 2024 9:00:00 AM By Stu Sjouwerman

Your KnowBe4 Compliance Plus Fresh Content Updates from November 2024

Dec 9, 2024 8:00:00 AM By Stu Sjouwerman

Check out the November updates in Compliance Plus so you can stay on top of featured compliance training content.

The 40% Rise of Phishing Attacks: How New Domain Extensions Are Fueling Cyber Crime

Dec 6, 2024 9:38:29 AM By Stu Sjouwerman

In recent years, the world of cybersecurity has witnessed a concerning trend: a significant increase in phishing attacks.

IRS Warns of Holiday-Themed Shopping Scams

Dec 6, 2024 9:38:26 AM By Stu Sjouwerman

The US Internal Revenue Service (IRS) has issued an advisory warning taxpayers to be on the lookout for holiday-themed shopping scams.

Security Awareness Training Blog

View Topics