Stu Sjouwerman

Chief Executive Officer & President

Stu Sjouwerman (pronounced “shower-man”) is the founder and CEO of KnowBe4, Inc., which hosts the world’s most popular integrated security awareness training and simulated phishing platform, with over 54,000 organization customers and more than 50 million users. A serial entrepreneur and data security expert with 30 years in the IT industry, Stu was the co-founder of Inc. 500 company Sunbelt Software, a multiple award-winning anti-malware software company that was acquired in 2010.

Books

Cyberheist E-Book

Find all of Stu's books on Amazon

[Heads Up] The REvil Ransomware Gang Is Now Auctioning Off Their Victim Data

Jun 2, 2020 4:39:34 PM By Stu Sjouwerman

Intrepid investigative Reporter Brian Krebs had the news first. "The criminal group behind the REvil ransomware enterprise has begun auctioning off sensitive data stolen from companies ...

CyberheistNews Vol 10 #23 [Eye-Opener] More Than Half of Your Employees Cut Security Corners When They Work Remote

Jun 2, 2020 9:25:46 AM By Stu Sjouwerman

Phishing for Supermarket Deliveries

Jun 2, 2020 9:00:23 AM By Stu Sjouwerman

Scammers are exploiting the increased demand for online shopping by setting up spoofed supermarket websites, Teiss reports. Researchers at Mimecast recently found thirty websites ...

The Latest Ransomware Attacks Can Require a Data Breach Notification

Jun 2, 2020 8:46:46 AM By Stu Sjouwerman

Ransomware variants shifting tactics to include extortion may be cause for organizations to treat them as data breaches and, therefore, quickly notify affected parties.

Human Performance as a Risk Factor

Jun 1, 2020 8:25:33 AM By Stu Sjouwerman

Most organizations don’t place enough focus on the human elements of cybersecurity, according to Stephen A. Wilson, Dean Hamilton, and Scott Stallbaum from consulting firm Wilson Perumal ...

Supreme Court “Summons” is the Latest Phishing Attack Aimed at Stealing Your Microsoft 365 Credentials

May 30, 2020 8:31:22 AM By Stu Sjouwerman

Even the Supreme Court isn’t safe from brand impersonation in this scam intent on getting victims to click on a link to a supposed subpoena to attend a hearing.

Verizon: Phishing is the Attack Vector Most Often Seen in Data Breaches

May 30, 2020 8:28:10 AM By Stu Sjouwerman

This year’s much-anticipated Verizon Data Breach Investigations Report sheds some light on how cybercriminals use phishing to achieve their goal of stealing data.

EasyJet Becomes the Latest Victim of Data Breach Impacting 9 Million Customers

May 30, 2020 8:25:32 AM By Stu Sjouwerman

In an apparent attack intent on stealing intellectual property, EasyJet announced that their customer’s personal data had been “accessed” as part of the attack.

State Unemployment Programs Are the Latest Victim of Massive Fraud

May 30, 2020 8:22:09 AM By Stu Sjouwerman

Leveraging PII from victims in Washington, North Carolina, Massachusetts, Rhode Island, Oklahoma, Wyoming and Florida, scammers from Nigeria are filing fraudulent unemployment claims.

Netwalker Ransomware Adopts an Affiliate Model to Help Increase Attacks and Profits

May 30, 2020 8:08:43 AM By Stu Sjouwerman

The ransomware formerly known as Mailto has taken a page from traditional software vendors and rebranded itself with a new affiliate-based go-to-market strategy.

[Eye-Opener] More Than Half Of Your Employees Cut Security Corners When They Work Remote

May 29, 2020 1:18:20 PM By Stu Sjouwerman

More than half of your employees are cutting corners with regards to cybersecurity while working from home, putting your organisation at risk. The coronavirus pandemic has forced all of ...

What to do About BEC?

May 28, 2020 8:23:39 AM By Stu Sjouwerman

Funds transfer fraud, also known as business email compromise (BEC), is a much more widespread problem than it seems, according to lawyers at Ice Miller LLP. The attorneys believe this ...

[Heads Up] Ransomware Damage Skyrockets As Ransoms Grew 14 Times In Just 12 Months

May 27, 2020 11:25:48 AM By Stu Sjouwerman

Last year was highly profitable for ransomware actors but with the prices we've seen recently, 2020 is likely to surpass it as actors continue to target large companies in key industries. ...

Beware of Phony LogMeIn Security Updates

May 27, 2020 9:32:29 AM By Stu Sjouwerman

Researchers at Abnormal Security warn that a phishing campaign is trying to steal LogMeIn remote desktop credentials. The attackers are sending phishing emails that purport to come from ...

CyberheistNews Vol 10 #22 [Scam of the Week] Microsoft Warns to Look out for This Massive Covid-19 Excel Phishing Attack

May 26, 2020 9:59:22 AM By Stu Sjouwerman

Phishing Campaigns Using Google Firebase Storage

May 26, 2020 8:31:52 AM By Stu Sjouwerman

Scammers are hosting phishing pages on Google Firebase Storage to bypass email security filters, Threatpost reports. Firebase is a Google-owned application development platform that ...

[Scam Of The Week] Microsoft Warns To Look Out for This Massive Covid-19 Excel Phishing Attack

May 23, 2020 12:34:45 PM By Stu Sjouwerman

Microsoft this week warned about a massive phishing attack that started on May 12. The campaign sends emails that look like they are from the "Johns Hopkins Center", and they have an ...

[Heads Up] The COVID Remote Work Mandate Skyrockets "Work From Home" Training Enrollments

May 21, 2020 1:51:12 PM By Stu Sjouwerman

KnowBe4 was one of the first to warn first about the impending COVID phishing tsunami on Jan 31, 2020. The bad guys did not disappoint and went all-out, all cylinders firing, and pulled ...

Nearly Every Organization is More Concerned about Cybersecurity Than Before COVID-19

May 20, 2020 4:36:21 PM By Stu Sjouwerman

New data from security vendor Tripwire highlights how the shift to remote working has changed the face of cybersecurity for both the current work climate and the future.

Your Next Ransomware Attack May Require Two Payments!

May 20, 2020 4:34:25 PM By Stu Sjouwerman

In a case of adding insult to injury, a new strain of ransomware is looking for one payment to decrypt, and a second payment to not publish stolen files.

Security Awareness Training Blog

View Topics