Stu Sjouwerman

Chief Executive Officer & President

Stu Sjouwerman (pronounced “shower-man”) is the founder and CEO of KnowBe4, Inc., which hosts the world’s most popular integrated security awareness training and simulated phishing platform, with over 54,000 organization customers and more than 50 million users. A serial entrepreneur and data security expert with 30 years in the IT industry, Stu was the co-founder of Inc. 500 company Sunbelt Software, a multiple award-winning anti-malware software company that was acquired in 2010.

Books

Cyberheist E-Book

Find all of Stu's books on Amazon

Ransomware Remains the Largest Source of Cyber Claims and Downtime

Dec 10, 2018 2:07:56 PM By Stu Sjouwerman

Details shared from Canadian insurer CFC Underwriting highlight the realities of ransomware attacks, and just how negatively impactful the aftermath is on business.

ModStore Release Announcement: "Using the Phish Alert Button"- 3-minute Short Version

Dec 10, 2018 1:01:42 PM By Stu Sjouwerman

Now live in the ModStore is a new Phish Alert video module: Using the Phish Alert Button - Basic Use This is the PAB (super short version) that we created based on requests from admins ...

[ALERT] Now The Bad Guys Are Phishing For Your Retirement Money

Dec 9, 2018 12:06:58 PM By Stu Sjouwerman

Eric Howes, KnowBe4 Principal Lab Researcher observed: "Here is a screenshot of a phishing email that came in Friday. In it the bad guys attempt to apply the same modus operandi currently ...

[Scam Of The Week] New Sextortion Attacks Take A Dark Turn And Infect People With GandCrab Ransomware

Dec 8, 2018 10:16:52 AM By Stu Sjouwerman

Our friends at Proofpoint reported that last week employees in the United States have been bombarded by a spam attack that pushed a double-whammy of a sextortion attempt combined with a ...

The FBI Catches CEO Fraud Scammers by Giving Them a Taste of Their Own Medicine

Dec 7, 2018 2:29:46 PM By Stu Sjouwerman

The case of how the FBI turned the tables on cybercriminals using the very same tactics demonstrates how powerful the art of social engineering and deception can get a victim to act.

True Phishing Confessions From A Compromised Company. This One Has A Twist At The End

Dec 7, 2018 10:55:58 AM By Stu Sjouwerman

"The email you hope you never have to send to clients/customers" OK, so here is another horror story that you hope you can prevent from happening to your own organization. This is an ...

"2019 Crystal Ball" On-Demand Webinar: What Security Experts Worry About for 2019

Dec 5, 2018 10:22:17 AM By Stu Sjouwerman

When Does a Legitimate Password Reset Email Feel Like a Phishing Attack? Just Ask Citrix Users

Dec 5, 2018 9:30:44 AM By Stu Sjouwerman

A recent password reset email from ShareFile (a Citrix company) put some users on edge, questioning both the emails legitimacy and why the reset.

CEO Fraud Attacks are Citing the California Wildfires

Dec 5, 2018 6:50:19 AM By Stu Sjouwerman

Criminals are using the California wildfires as a social engineering tactic to manipulate people into buying gift cards supposedly intended for victims of the disaster, according to James ...

Google Maps’ Bank Listings Updated by Scammers

Dec 5, 2018 6:37:42 AM By Stu Sjouwerman

Scammers are taking advantage of Google Maps by modifying the contact information of the service’s bank listings. After replacing banks’ legitimate phone numbers with numbers of their ...

GreyEnergy Malware Spreads Through Phishing Emails

Dec 5, 2018 6:32:48 AM By Stu Sjouwerman

The GreyEnergy APT primarily uses phishing emails as its initial infection method, according to analysis by Nozomi Networks. The malware has been targeting industrial control systems in ...

Phishing Emails are Targeting Spotify Users

Dec 5, 2018 6:25:14 AM By Stu Sjouwerman

A phishing campaign is attempting to steal login credentials from Spotify users, according to researchers at AppRiver. The emails ask users to click a hyperlink to confirm their accounts, ...

Hackers reportedly breached Republican campaign committee emails during 2018 elections

Dec 4, 2018 1:50:43 PM By Stu Sjouwerman

The National Republican Congressional Committee (NRCC) was hacked during the 2018 midterm elections, according to a report from Politico. Republican officials said that hackers had access ...

61% of Organizations Believe Negligent Users Will be the Primary Cause of a Data Breach in the Next 12 Months

Dec 4, 2018 9:44:08 AM By Stu Sjouwerman

Dark Readings annual Strategic Security Survey provides several details highlighting that organizations aren’t ready, and users aren’t helping.

Why You Need To Make Security Awareness Training Mandatory. Read This Horror Story.

Dec 4, 2018 7:24:15 AM By Stu Sjouwerman

OK, so here is a horror story that you can prevent from happening in your own organization. Now and then we hear that KnowBe4 customers do not make the security awareness training ...

Data Breach at Q&A Site Quora Affects 100 Million

Dec 4, 2018 7:03:43 AM By Stu Sjouwerman

It's all over the news, it even made the Wall Street Journal. I'm a quora participant myself and received the news directly in an email.

That was fast! Bad Guys Are Using The Marriott Breach For Phishing Attacks

Dec 4, 2018 6:48:36 AM By Stu Sjouwerman

As predicted, the Marriott breach is heaven for bad guys. KnowBe4 customers are using the (free) Phish Alert Button to report in the wild phishing attacks using the recent news.

From the “Shaking My Head” File: New Phishing Scam Seeks to Help Wildfire Victims… With Google Play Cards???

Dec 3, 2018 1:57:39 PM By Stu Sjouwerman

Cybercriminals will take advantage of any major news story if there’s a way to make money from it. But sometimes, the scam just gets a little too odd to believe.

CyberheistNews Vol 8 #48 [Heads-Up] Bad Guys Love Marriott: 500 Million Data Breach Is Phishing Heaven

Dec 3, 2018 9:56:14 AM By Stu Sjouwerman

The Massive Marriott Data Breach: Some Practical Advice For Business Travelers

Dec 2, 2018 7:54:05 AM By Stu Sjouwerman

If you have stayed in one or the following hotels in the last 4 years, it's very likely that your personal data—and even potentially your passport number—has been stolen and is available ...

Security Awareness Training Blog

View Topics