Stu Sjouwerman

Chief Executive Officer & President

Stu Sjouwerman (pronounced “shower-man”) is the founder and CEO of KnowBe4, Inc., which hosts the world’s most popular integrated security awareness training and simulated phishing platform, with over 54,000 organization customers and more than 50 million users. A serial entrepreneur and data security expert with 30 years in the IT industry, Stu was the co-founder of Inc. 500 company Sunbelt Software, a multiple award-winning anti-malware software company that was acquired in 2010.

Books

Cyberheist E-Book

Find all of Stu's books on Amazon

Phishing Emails Use SVG Files to Avoid Detection

Nov 22, 2024 11:39:14 AM By Stu Sjouwerman

Phishing emails are increasingly using Scalable Vector Graphics (SVG) attachments to display malicious forms or deliver malware, BleepingComputer reports.

Threat Group Use AI Adult-Based “Deepnude” Image Generator Honeypots to Infect Victims

Nov 22, 2024 11:39:11 AM By Stu Sjouwerman

The threat group FIN7 is using the lure of generating nude images of favorite celebrities to get victims to download their NetSupport RAT.

Phishing Attacks Exploits the Open Enrollment Period

Nov 22, 2024 9:18:17 AM By Stu Sjouwerman

A phishing campaign is impersonating HR to target employees who are making annual insurance changes during the open enrollment period, according to researchers at Abnormal Security.

Ransomware Gangs Evolve: They're Now Recruiting Penetration Testers

Nov 20, 2024 2:22:16 PM By Stu Sjouwerman

A new and concerning cybersecurity trend has emerged. According to the latest Q3 2024 Cato CTRL SASE Threat Report from Cato Networks, ransomware gangs are now actively recruiting ...

Out of 29 Billion Cybersecurity Events, Phishing was the Primary Method of Initial Attack

Nov 20, 2024 2:22:11 PM By Stu Sjouwerman

The newly released single largest analysis of cyber attacks across all of 2023 show a strong tie between the use of phishing and techniques designed to gain credentialed access.

Threat Actors are Sending Malicious QR Codes Via Snail Mail

Nov 20, 2024 10:40:54 AM By Stu Sjouwerman

The Swiss National Cyber Security Centre (NCSC) has warned of a QR code phishing (quishing) campaign that’s targeting people in Switzerland via physical letters sent through the mail, ...

A New Era In Human Risk Management:Introducing KnowBe4 HRM+

Nov 19, 2024 2:03:25 PM By Stu Sjouwerman

Cybersecurity threats grow more sophisticated by the day. Amid this constant change, one truth remains: people are simultaneously our greatest security vulnerability and our strongest ...

CyberheistNews Vol 14 #47 Step-by-Step To Creating Your First Realistic Deepfake Video in a Few Minutes

Nov 19, 2024 9:00:00 AM By Stu Sjouwerman

Phishing Attacks Exploit Microsoft Visio Files and SharePoint

Nov 15, 2024 10:06:32 AM By Stu Sjouwerman

Threat actors are exploiting Microsoft Visio files and SharePoint to launch two-step phishing attacks, according to researchers at Perception Point.

Half of all Ransomware Attacks This Year Targeted Small Businesses

Nov 15, 2024 10:05:57 AM By Stu Sjouwerman

New data shows just how crippling ransomware has been on small businesses that have fallen victim to an attack and needed to pay the ransom.

[World Premiere] KnowBe4 Debuts New Season 6 of Netflix-Style Security Awareness Video Series - “The Inside Man”

Nov 14, 2024 10:00:00 AM By Stu Sjouwerman

We’re thrilled to announce the long-awaited sixth season of the award-winning KnowBe4 Original Series - “The Inside Man” is now available in the KnowBe4 ModStore!

Criminal Threat Actor Uses Stolen Invoices to Distribute Malware

Nov 13, 2024 3:08:32 PM By Stu Sjouwerman

Researchers at IBM X-Force are tracking a phishing campaign by the criminal threat actor “Hive0145” that’s using stolen invoice notifications to trick users into installing malware.

Nation-State Threat Actors Rely on Social Engineering First

Nov 12, 2024 3:38:33 PM By Stu Sjouwerman

A new report from ESET has found that most nation-state threat actors rely on spear phishing as a primary initial access technique.

CyberheistNews Vol 14 #46 [Eye Opener] Attackers Don't Hack, They Log In. Can You Stop Them?

Nov 12, 2024 9:00:00 AM By Stu Sjouwerman

[FREE RESOURCE KIT] Stay Cyber Safe this Holiday Season with Our Free 2024 Resource Kit!

Nov 12, 2024 7:24:00 AM By Stu Sjouwerman

Isn’t it typical for bad actors to strike when we’re distracted and busy during this time of year?

Criminals Use Search Engine Poisoning to Boost Phishing Pages

Nov 11, 2024 4:46:36 PM By Stu Sjouwerman

Researchers at Malwarebytes warn that cybercriminals are using search engine poisoning to boost phishing pages to the top of Bing’s search results.

Recon 2.0: AI-Driven OSINT in the Hands of Cybercriminals

Nov 11, 2024 8:00:00 AM By Stu Sjouwerman

Cybercriminals are using artificial intelligence (AI) and generative AI in open source intelligence (OSINT) activities to target your organization with supercharged reconnaissance efforts.

[Eye Opener] Attackers Don’t Hack, They Log In. Can You Stop Them?

Nov 9, 2024 8:58:57 AM By Stu Sjouwerman

The latest trend in cybercrime is that attackers don't really focus on “hacking” in; they’re logging in.

Phishing Campaign Impersonates OpenAI To Collect Financial Data

Nov 7, 2024 2:31:28 PM By Stu Sjouwerman

Cybercriminals are impersonating OpenAI in a widespread phishing campaign designed to trick users into handing over financial information. The emails inform users that a payment for their ...

Attackers Abuse DocuSign to Send Phony Invoices

Nov 7, 2024 8:09:49 AM By Stu Sjouwerman

Threat actors are abusing DocuSign’s API to send phony invoices that appear “strikingly authentic,” according to researchers at Wallarm.

Security Awareness Training Blog

View Topics