Stu Sjouwerman

Chief Executive Officer & President

Stu Sjouwerman (pronounced “shower-man”) is the founder and CEO of KnowBe4, Inc., which hosts the world’s most popular integrated security awareness training and simulated phishing platform, with over 54,000 organization customers and more than 50 million users. A serial entrepreneur and data security expert with 30 years in the IT industry, Stu was the co-founder of Inc. 500 company Sunbelt Software, a multiple award-winning anti-malware software company that was acquired in 2010.

Books

Cyberheist E-Book

Find all of Stu's books on Amazon

Equifax: "Oh, minor detail, we also lost 17.6 Million driver's licenses in that data breach"...

May 11, 2018 12:38:18 PM By Stu Sjouwerman

On May 7, executives of Equifax submitted a "statement for the record" to the Securities and Exchange Commission detailing the extent of the consumer data breach the company first ...

KnowBe4 Releases Delegated Admin Permissions

May 10, 2018 5:32:23 PM By Stu Sjouwerman

KnowBe4 is proud to announce support for delegated permissions as part of the Security Roles feature. Security Roles allows you to limit roles to only display specific data or allow for ...

[Breaking] New BitKangoroo Ransomware Deletes Your Files If You Do not Pay

May 9, 2018 1:41:04 PM By Stu Sjouwerman

Our friend Larry Abrams at Bleepingcomputer said: "I am trying something new where I will post in brief articles about new ransomware as they are released. Many of these ransomware ...

CyberheistNews Vol 8 #19 [Heads-up] Scary New Exploit Hacks LinkedIn 2-Factor Auth. See This Kevin Mitnick VIDEO

May 8, 2018 9:36:19 AM By Stu Sjouwerman

[Heads-up] New Exploit Hacks LinkedIn 2-factor Auth. See This Kevin Mitnick VIDEO

May 8, 2018 6:07:35 AM By Stu Sjouwerman

OK, here is something really scary. KnowBe4's Chief Hacking Officer Kevin Mitnick now and then calls me with some chilling news. This time, Kuba Gretzky, a white hat hacker friend of ...

Scam Of The Week: Phishing Attack Uses GDPR As Bait

May 5, 2018 10:40:16 AM By Stu Sjouwerman

Attackers know that companies are sending a lot of emails to customers about GDPR—and that makes them prime opportunity for phishing attacks. With the looming GDPR May 25 deadline almost ...

Q1 2018 Top Clicked Phishing Email Subjects [INFOGRAPHIC]

May 4, 2018 5:05:27 PM By Stu Sjouwerman

This is the second year we've published quarterly results of the most-clicked phishing email subjects across a few categories. We separate the data into subjects related to social media ...

Chinese Cyber Spies Focus On Spear Phishing... YOU!

May 4, 2018 4:43:32 PM By Stu Sjouwerman

Catalin Cimpanu at Bleepingcomputer reported: "Chinese cyber spies are evolving their tactics, focusing on IT staffers, relying more and more on spear phishing instead of malware, and ...

Are Bad Guys Swapping TeamViewer For AnyDesk to install Blackheart Ransomware?

May 3, 2018 3:09:00 PM By Stu Sjouwerman

According to Trend Micro researchers a new ransomware strain called Blackheart drops its payload alongside the perfectly legitimate AnyDesk remote desktop tool, highly likely as a way to ...

Cylance: "Phishing and drive-by downloads lead infection methods."

May 2, 2018 10:30:46 AM By Stu Sjouwerman

The most common infection vectors are still email phishing and drive-by downloads according to the latest threat report from AI security specialist Cylance. The report provides a ...

86% Of Passwords Are Terrible And Employees Reuse Them All The Time

May 2, 2018 7:18:46 AM By Stu Sjouwerman

Troy Hunt, the founder of Haveibeenpwned came out with some brand new numbers that show there's bad news and there's more bad news. A few months ago he launched V2 of his Pwned Passwords ...

Massachusetts School District Pays $10K to Ransomware Attackers

May 2, 2018 6:28:53 AM By Stu Sjouwerman

"A school district located in Massachusetts paid attackers $10,000 after they infected its computer network with crypto-ransomware. Officials at Leominster Public Schools decided to meet ...

Gone Phishing: Travelers Claims Plan Doesn’t Cover Cyber Losses

May 1, 2018 5:14:19 PM By Stu Sjouwerman

Daniel R. Stoller at Bloomberg Law had an excellent observation about the risks of phishing related to general crime policies. Here is a short excerpt and the whole article is warmly ...

"It can't hurt to open one little attachment, can it?"

May 1, 2018 4:49:48 PM By Stu Sjouwerman

Brad Haan sent me this riot cartoon:

PhishLabs Reports That Credential Phishing Has Shifted To The Enterprise

May 1, 2018 10:23:34 AM By Stu Sjouwerman

Why is credentials phishing moving from consumers to the enterprise, just like ransomware has done in the last 2 years? The answer might surprise you. Elliot Volkman at the PhishLabs ...

CyberheistNews Vol 8 #18 Scam of the Week: World's No. 1 Criminal Phishing Botnet Turns Even More Tricky

May 1, 2018 9:51:43 AM By Stu Sjouwerman

ModStore Update: "2018 Safe Web Browsing" and "Ransomware" Localized in 20 Languages

Apr 30, 2018 5:10:35 PM By Stu Sjouwerman

We have some good news! The "2018 Safe Web Browsing" and "2018 Ransomware" module's 20 language versions are now better than ever. As of today, the following improvements are now present ...

Phishing threats still dwarf vulnerabilities and zero-days

Apr 30, 2018 4:13:16 PM By Stu Sjouwerman

Rob Wright at SearchSecurity wrote: "Proofpoint research shows that while phishing attacks now require victims to take more steps, the success rate for such attacks hasn't declined and ...

Gone Phishing: Employer Faces Liability for Mistakenly Disclosing W-2 Forms to Scammer

Apr 30, 2018 7:05:00 AM By Stu Sjouwerman

Attorneys Zuckerman Spaeder noted on JDSUPRA: "When employers are caught off guard, they can face not only the loss of their own assets, but also liability to their employees. For ...

Scam Of The Week: World's Largest Phishing Botnet Grows Evasive

Apr 28, 2018 11:01:06 AM By Stu Sjouwerman

The notorious Necurs botnet is one of the oldest and largest spam and phishing delivery systems in existence. It controls millions of machines that the criminal botmasters use to send ...

Security Awareness Training Blog

View Topics