Human Risk Management Blog

Keeping you informed. Keeping you aware.
Stay on top of the latest in security including social engineering, ransomware and phishing attacks.

Stu Sjouwerman

Founder and Executive Chairman

Stu Sjouwerman (pronounced “shower-man”) is the Founder and Executive Chairman of KnowBe4, Inc., which hosts the world’s most popular integrated security awareness training and simulated phishing platform, with over 54,000 organization customers and more than 50 million users. A serial entrepreneur and data security expert with 30 years in the IT industry, Stu was the co-founder of Inc. 500 company Sunbelt Software, a multiple award-winning anti-malware software company that was acquired in 2010.


Recent Posts

CyberheistNews Vol 8 #28

Ransomware Mid-Year Update: It’s Worse Than Ever

We’re finally getting a look at how much ransomware attacks have been seen in the wild in the first half of 2018 – and the numbers are astounding.

Another Hacking Scandal? Russians could be behind 'cyber caliphate'

The US Senate is asking the Justice Department to look into the possibility that an Islamic extremist hacking group was actually the work of the Russian government.

Russian Indictment: They Used Criminal Tradecraft like Spearphishing To Hack The Democratic Party

The email arrived in Hillary Clinton’s campaign chairman John Podesta’s inbox around March 19, 2016, during the height of the presidential primaries, spoofed to look like a standard ...

What Would You Like To Ask Kevin Mitnick About Social Engineering?

Here's your chance. Late August we'll do a live webinar with Kevin, and he asked me to find out what questions you have for him regarding social engineering, so we can cover them in this ...

Bad guys use Google's Golang to cross-compile multi-platform malware

Here is the bad news: The use of Google's Golang (also called Go) programming language allows attackers to cross-compile malware for use on multiple platforms, making potential attacks on ...

New Report: Mobile Phishing on the Rise

With users being three times more likely to click on a suspicious link on their mobile device, along with over half of mobile users tapping on a phishing URL, mobile phishing is a bigger ...

[Scam Of The Week] Amazon Prime Day Is Only 4 days away

It's a prime opportunity for the bad guys to send a raft of phishing attacks. We do have a "Free Amazon Prime Account" template that we just modified to fit a Prime Day-style scam. It's ...

From the Phishing Archives: Just How Far Will Cybercriminals Go for a Scam? Apparently into Outer Space.

The Nigerian Prince scam was found taking a turn upwards to the stars, seeking your help to bring a poor lonely astronaut home.

Do You Have A Millennial Security Awareness Training Gap?

Unlike previous generations, millennials have used (and trusted) technology all their lives. So, does it cause a gap in your organization’s Security Awareness Program?

North Korea Brings Light to a “Cool” Way to Spread Malware

In the midst of all the political talk about the recent summit between the United States and North Korea, one particular gift caught the eye of security experts.

Sextortion Phishing Campaign Uses Recipient's Hacked Passwords

Krebs on Security has posted a new item: "Here's a clever new twist on an old email scam that could serve to make the con far more believable. The message purports to have been sent from ...

[Heads-Up] New Deceptive Strains Of Payroll Phishing: "Because that's where the money is..."

Most readers will probably be familiar with the story of bank robber Willie Sutton who, after being nailed by the cops, was asked why he robbed the bank. His answer (undoubtedly delivered ...

Court Ruling: Chubb Insurance Unit Crime Policy Covers ‘Spoofed’ Phishing Wire Transfer

Very interesting article in the Insurance Journal. In a closely-watched case on insurance coverage in an age of expanding cyber risk, a federal appeals court in New York has upheld a ...

Don’t Catch a Case of the (Gand)Crabs!

As irritating as a real case of the crabs can be, organizations now have to deal with GandCrab v4 – a more dangerous and invasive newly released strain of the notorious ransomware. If you ...

"What Exactly Are The Risks Of Breached Passwords?"

First of all, the term means that a particular password is available in a data breach on the dark web–and there are billions of breached passwords out there. KnowBe4 just released a free ...

Context is the Key to Phishing Success

According to the latest report from NIST, one of the most critical factors around whether a user clicks a phishing email or not is context.

Consumer Privacy: California Follows in the Footsteps of GDPR

The California Consumer Privacy Act of 2018 (AB 375) takes effect on January 1, 2020 and will be the most exacting data privacy policy in the United States. Similar to the European ...

Watch Out – Cryptojacking rises 1,180 percent!

As if ransomware wasn’t enough of a problem, the addition coin mining malware’s and a 1,189% mind-bending increase is enough to make you sit up and take notice. Cryptomining is a ...


Get the latest insights, trends and security news. Subscribe to CyberheistNews.