Stu Sjouwerman

Chief Executive Officer & President

Stu Sjouwerman (pronounced “shower-man”) is the founder and CEO of KnowBe4, Inc., which hosts the world’s most popular integrated security awareness training and simulated phishing platform, with over 54,000 organization customers and more than 50 million users. A serial entrepreneur and data security expert with 30 years in the IT industry, Stu was the co-founder of Inc. 500 company Sunbelt Software, a multiple award-winning anti-malware software company that was acquired in 2010.

Books

Cyberheist E-Book

Find all of Stu's books on Amazon

Two Men Charged in a Case of Phishing NFL and NBA Players

Oct 2, 2020 8:25:05 AM By Stu Sjouwerman

The US Department of Justice has charged two men for allegedly hacking social media and other accounts belonging to NFL and NBA players, Mashable reports. Trevontae Washington, 21, of ...

Don't Just Catch a Phish, Captcha One

Oct 1, 2020 11:03:29 AM By Stu Sjouwerman

Researchers at Menlo Security have identified a phishing site that uses three layers of visual captchas to evade detection by automated security crawlers. Captchas are brief tests on ...

[CRITICAL] 250,000 Microsoft Exchange Servers are Unpatched and Vulnerable to Remote Code Execution Attacks!

Sep 30, 2020 3:37:08 PM By Stu Sjouwerman

With an estimated 61% of Exchange servers in the wild still operating unpatched, this security flaw allows attackers to take over a vulnerable server using any set of valid email ...

[Heads Up] This Ingenious Worm Phishing Campaign Is A Game-Changer In Password Theft And Account Takeovers

Sep 30, 2020 9:52:30 AM By Stu Sjouwerman

A few days ago in a Medium blog post, Craig Hays, a cybersecurity architect and bug bounty hunter described a recent phishing new type of attempt which turned out to become "the greatest ...

Phishing Attacks Continue to Grow More Sophisticated

Sep 30, 2020 8:24:36 AM By Stu Sjouwerman

Both criminal and nation-state threat actors have “rapidly increased in sophistication” over the past twelve months, according to Microsoft’s Digital Defense report. Microsoft found that ...

What’s the Information Stolen in a Phishing Attack Really Worth?

Sep 29, 2020 11:17:39 AM By Stu Sjouwerman

Once a scammer tricks their victim out of web credentials, credit card details, or online access to a bank account, the details collected are worth plenty by simply selling them on the ...

Spike in Emotet Attacks Against Government Agencies Seen Around the Globe in September

Sep 29, 2020 11:13:01 AM By Stu Sjouwerman

Attacks involving what is arguably the world’s most dangerous malware are on the rise, with reports from the cybersecurity agencies in Japan, New Zealand, and France.

The 2020 Election is Expected to be the Next Big Theme for Cyber Attacks

Sep 29, 2020 11:10:29 AM By Stu Sjouwerman

As the bad guys look for new ways to wreak havoc, cybersecurity experts at NTT global predict attacks pre-, during, and post-election should be expected.

CyberheistNews Vol 10 #40 [Scary Stuff] A Chinese Antivirus Vendor Is Tied to a Decade-Long Hacking Spree

Sep 29, 2020 9:59:27 AM By Stu Sjouwerman

KnowBe4 Earns 2020 Top Rated Award from TrustRadius

Sep 29, 2020 8:27:43 AM By Stu Sjouwerman

We are proud to announce that TrustRadius has recognized KnowBe4 with a 2020 Top Rated Award.

Phishing Campaign Goes After AT&T Employees’ MFA Codes

Sep 29, 2020 8:22:37 AM By Stu Sjouwerman

A phishing campaign is targeting AT&T employees and contractors with a well-crafted fake login page, according to Luke Leal at Sucuri. The phishing page is a near-exact replica of ...

Organizations Working From Home Opens Wider Target for Cybercriminals

Sep 28, 2020 8:28:57 AM By Stu Sjouwerman

With so many people working from home, more attackers are adapting their strategies to focus on employees as a way to bypass organizations’ defenses, FCW reports. During a webcast hosted ...

Chinese Antivirus Vendor Tied to Part of a Decade-Long Hacking Spree

Sep 24, 2020 11:04:01 AM By Stu Sjouwerman

Members of the hacking group “Apt41” were charged by the U.S. Department of Justice for hacking more than 100 victims globally with one of its members running AV vendor Anvisoft.

Cyberattacks Targeting State and Local Government Increase by 50%

Sep 24, 2020 11:00:25 AM By Stu Sjouwerman

State, local, tribal, and territorial government agencies and municipalities are under attack. Observations and data from security vendor BlueVoyant highlight the attacks and the results.

60% of the US Workforce Will Be Working Remotely by 2024 (and That’s a Problem)

Sep 24, 2020 10:57:20 AM By Stu Sjouwerman

The latest data from analyst firm IDC shows massive growth in the remote workforce in the coming years – something that puts organizations at greater risk for a cyberattack.

Tribune Publishing apologizes for fake bonus offer in phishing-simulation email

Sep 24, 2020 10:29:04 AM By Stu Sjouwerman

Yesterday at the end of the day, I was called by our PR team who got alerted by tech support about a Twitter post that was going viral. Turns out a custom phishing test created by one of ...

Abusing App Engine to Automate Phishing

Sep 24, 2020 8:30:09 AM By Stu Sjouwerman

Attackers can abuse a feature in Google App Engine to generate unlimited phishing URLs, BleepingComputer reports. Security researcher Marcel Afrahim found that App Engine URLs that ...

Which Users in Your Organization Put You at Risk?

Sep 24, 2020 7:00:00 AM By Stu Sjouwerman

October is National Cybersecurity Awareness Month, so it's a perfect time to fortify your human firewall. Start by identifying which users may be putting your organization at risk before ...

KnowBe4 Receives a 2020 Tech Cares Award

Sep 23, 2020 11:24:32 AM By Stu Sjouwerman

Sticking to our values continues to pay off, as we have recently received a Tech Cares award from TrustRadius. This is a brand-new award crafted to celebrate organizations that have ...

Five Alarming Approaches to Extortion

Sep 23, 2020 8:30:10 AM By Stu Sjouwerman

People should familiarize themselves with common forms of extortion in order to avoid falling victim to these attacks, according to Amer Owaida at ESET. Ransomware might be the most ...

Security Awareness Training Blog

View Topics