Stu Sjouwerman

Chief Executive Officer & President

Stu Sjouwerman (pronounced “shower-man”) is the founder and CEO of KnowBe4, Inc., which hosts the world’s most popular integrated security awareness training and simulated phishing platform, with over 54,000 organization customers and more than 50 million users. A serial entrepreneur and data security expert with 30 years in the IT industry, Stu was the co-founder of Inc. 500 company Sunbelt Software, a multiple award-winning anti-malware software company that was acquired in 2010.

Books

Cyberheist E-Book

Find all of Stu's books on Amazon

Massive phishing wave of account hijacks hits YouTube creators

Sep 23, 2019 7:47:49 AM By Stu Sjouwerman

Over the past few days, a massive wave of account hijacks has hit YouTube users, and especially creators in the auto-tuning and car review community, a ZDNet investigation discovered ...

PDF Phishing Attacks Using Microsoft OneDrive Surge Nearly 200%

Sep 19, 2019 3:23:25 PM By Stu Sjouwerman

Scammers use a mixture of familiar brand, unsuspecting users, legitimate document types and locations, and credential harvesting in this attack aimed at getting into your Office 365.

CEO Fraud Attacks Now Use Deepfake Audio and AI to Mimic Executives Over the Phone

Sep 19, 2019 2:54:32 PM By Stu Sjouwerman

While deepfake video gets most of the attention on social media, it’s deepfake audio that is quickly becoming the cybercriminal’s tools of choice for committing fraud.

In the Hot Seat: Three Experts Tackle 10 Critical Security Awareness Issues

Sep 19, 2019 9:35:00 AM By Stu Sjouwerman

Three experts. 10 hot topics. Sixty minutes. What happens when you lock highly opinionated security awareness experts in a room with a microphone and a list of top security issues facing ...

Amazon Phishing Scam in Progress

Sep 19, 2019 7:49:14 AM By Stu Sjouwerman

HackRead has come across a phishing scam that’s trying to trick Amazon customers into handing over their account credentials, personal information, and financial details. The phishing ...

The U.S. Cybersecurity and Infrastructure Security Agency Lays Out Strategic Vision and Priorities in the Wake of Texas Ransomware Attacks.

Sep 18, 2019 7:27:45 AM By Stu Sjouwerman

This new document, entitled Strategic Intent highlights ways to “defend today, secure tomorrow” and comes out as the CISA director admits that ransomware is “only getting worse.”

Microsoft Remains the Most Impersonated Brand in Phishing Attacks, with Facebook Phishing Surging

Sep 18, 2019 7:23:56 AM By Stu Sjouwerman

For the fifth quarter in a row, Microsoft is the favorite domain of choice for scammers using phishing attacks to lure their victims into clicking on malicious content.

Advice For Women: "Breaking Into the InfoSec Business"

Sep 18, 2019 7:21:15 AM By Stu Sjouwerman

KnowBe4’s Senior Vice President of Cyber Operations Rosa Smothers was recently interviewed on the CyberWire’s Daily Podcast, where she discussed her background working for the CIA and ...

18 Months, 61 Billion Credential-Stuffing Attacks

Sep 18, 2019 7:16:16 AM By Stu Sjouwerman

Akamai observed 61 billion credential stuffing attacks between January 2018 and June 2019, according to Computer Business Review. In a new report on Internet security, Akamai researchers ...

CyberheistNews Vol 9 #38 [Heads-Up] Holy SIMoly! SIM Card Attack Used to Spy on Mobile Phone Users

Sep 17, 2019 9:51:14 AM By Stu Sjouwerman

Phishing Attacks Up, Especially Against SaaS And Webmail Services

Sep 17, 2019 7:04:22 AM By Stu Sjouwerman

Phishing attacks continued to rise into the summer of 2019 with cybercrime gangs’ focus on branded webmail and SaaS providers remaining very keen, according to the APWG report. The report ...

Oklahoma Pension Fund Robbed of $4.2 million via Compromised Email

Sep 17, 2019 6:56:45 AM By Stu Sjouwerman

Attackers stole millions of dollars from Oklahoma’s pension fund for retired law enforcement officers, the Oklahoman reports. The Oklahoma Law Enforcement Retirement System (OLERS) said ...

[Phishing Alert] UK Home Office primes Brexit spam cannon for a million texts reminding folk to check passports

Sep 16, 2019 2:18:57 PM By Stu Sjouwerman

The Register reported: "The UK Home Office will send a million text messages reminding people that the rules for travelling to the European Union will change in the event of a no-deal ...

Exclusive: Russia carried out a 'stunning' breach of FBI communications system, escalating the spy game on U.S. soil

Sep 16, 2019 1:31:00 PM By Stu Sjouwerman

Yahoo came out with some very interesting news: "On Dec. 29, 2016, the Obama administration announced that it was giving nearly three dozen Russian diplomats just 72 hours to leave the ...

Ex White House CIO attacks insurance firms for 'fuelling ransomware industry'

Sep 16, 2019 9:44:06 AM By Stu Sjouwerman

Former CIO of the White House Theresa Payton has warned that cyber insurance companies are supporting the ransomware industry by manipulating organisations into paying to have their ...

WSJ: "U.S. Targets North Korean Hacking as Rising National-Security Threat"

Sep 16, 2019 7:23:50 AM By Stu Sjouwerman

Ian Talley and Dustin Volz at the WSJ wrote:

Employees Are the Reason 70% of Financial Companies Have Suffered Security Incidents in the Last Twelve Months

Sep 16, 2019 7:00:00 AM By Stu Sjouwerman

The latest data from cybersecurity vendor Clearswift shows untrained employees are clearly the source of incidents that plague an overwhelming majority of companies in the financial ...

Video Becomes the Next Big Bait for Social Engineering

Sep 16, 2019 7:00:00 AM By Stu Sjouwerman

Scammers are always looking for new ways to get potential victims to engage. It appears that the latest trend is to leverage our familiarity with watching video to spawn an attack.

Only 5% of U.S. Healthcare Employees Receive Continual Cybersecurity Awareness Training

Sep 16, 2019 7:00:00 AM By Stu Sjouwerman

A recent report by security vendor Kaspersky highlights how healthcare organizations are at risk of cyberattack – and how a lack of training is responsible.

How Can You Check If Your Email Is Compromised?

Sep 16, 2019 6:52:18 AM By Stu Sjouwerman

Rudy Friederich, a KnowBe4 friend at Marshal Security LLC sent me the following interesting tips related to finding out if you are the victim of Business Email Compromise. He wrote:

Security Awareness Training Blog

View Topics

Stu Sjouwerman

Books

Recent Posts

Massive phishing wave of account hijacks hits YouTube creators

PDF Phishing Attacks Using Microsoft OneDrive Surge Nearly 200%

CEO Fraud Attacks Now Use Deepfake Audio and AI to Mimic Executives Over the Phone

In the Hot Seat: Three Experts Tackle 10 Critical Security Awareness Issues

Amazon Phishing Scam in Progress

The U.S. Cybersecurity and Infrastructure Security Agency Lays Out Strategic Vision and Priorities in the Wake of Texas Ransomware Attacks.

Microsoft Remains the Most Impersonated Brand in Phishing Attacks, with Facebook Phishing Surging

Advice For Women: "Breaking Into the InfoSec Business"

18 Months, 61 Billion Credential-Stuffing Attacks

CyberheistNews Vol 9 #38 [Heads-Up] Holy SIMoly! SIM Card Attack Used to Spy on Mobile Phone Users

Phishing Attacks Up, Especially Against SaaS And Webmail Services

Oklahoma Pension Fund Robbed of $4.2 million via Compromised Email

[Phishing Alert] UK Home Office primes Brexit spam cannon for a million texts reminding folk to check passports

Exclusive: Russia carried out a 'stunning' breach of FBI communications system, escalating the spy game on U.S. soil

Ex White House CIO attacks insurance firms for 'fuelling ransomware industry'

WSJ: "U.S. Targets North Korean Hacking as Rising National-Security Threat"

Employees Are the Reason 70% of Financial Companies Have Suffered Security Incidents in the Last Twelve Months

Video Becomes the Next Big Bait for Social Engineering

Only 5% of U.S. Healthcare Employees Receive Continual Cybersecurity Awareness Training

How Can You Check If Your Email Is Compromised?

Search Our Blog

Subscribe To Our Blog

Posts By Topic

Get the latest about social engineering

Subscribe to CyberheistNews

Get the latest about social engineering

Subscribe to CyberheistNews