Stu Sjouwerman

Chief Executive Officer & President

Stu Sjouwerman (pronounced “shower-man”) is the founder and CEO of KnowBe4, Inc., which hosts the world’s most popular integrated security awareness training and simulated phishing platform, with over 54,000 organization customers and more than 50 million users. A serial entrepreneur and data security expert with 30 years in the IT industry, Stu was the co-founder of Inc. 500 company Sunbelt Software, a multiple award-winning anti-malware software company that was acquired in 2010.

Books

Cyberheist E-Book

Find all of Stu's books on Amazon

PDF Files Can Be Abused to Steal Windows Credentials

Apr 27, 2018 5:51:44 PM By Stu Sjouwerman

PDF files can be weaponized by malicious actors to steal Windows credentials (NTLM hashes) without any user interaction, and only by opening a file, according to Assaf Baharav, a security ...

Ransomware up 350% says 2018 Global Threat Intelligence Report

Apr 27, 2018 4:27:33 PM By Stu Sjouwerman

NTT Security 2018 Global Threat Intelligence Report (GTIR): Ransomware up 350% and spyware ranks first in volume of malware at 26% reflecting attackers' desire for long-term presence for ...

Researchers discover next generation phishing kit

Apr 26, 2018 1:22:10 PM By Stu Sjouwerman

Researchers at Check Point and CyberInt, have discovered a new generation of phishing kit that is readily available on the Dark Web. The new kit, compiled and offered by a criminal whose ...

Center for Orthopaedic Specialists notifies 85,000 patients of ransomware infection

Apr 25, 2018 5:25:21 PM By Stu Sjouwerman

Another indicator that a ransomware infection is seen as a HIPAA data breach and needs to be reported. The Center for Orthopaedic Specialists (COS) in California has three locations in ...

Yahoo Pays $35 Million Penalty For The Hot Mess Of Their Massive Data Breach

Apr 25, 2018 7:09:20 AM By Stu Sjouwerman

This is the first time that a public company gets fined by regulators for failure to properly investigate their 2014 data breach, and disclose it to shareholders. Technically this is not ...

Mysterious “double kill” Word/IE zero-day allegedly in the wild as phishing attack

Apr 25, 2018 6:40:16 AM By Stu Sjouwerman

“Double kill” is a bragging term from the world of violent video gaming – it means you finished off two assailants with a single shot. In the world of cybercrime, it’s the name given by ...

CyberheistNews Vol 8 #17 New Large Email Security Gap Analysis Shows a Massive 15% Failure Rate

Apr 24, 2018 9:47:00 AM By Stu Sjouwerman

Ransomware Attack Costs Dutch Builder 60,000 Euros

Apr 23, 2018 3:41:31 PM By Stu Sjouwerman

A ransomware infection has cost Dutch builder Almi Machinebouwers at least 60,000 euros. That is what director Frank Landhuis said in an interview with Sprout. Due to the infection, ...

New Large Email Security Gap Analysis Shows a Massive 15% Failure Rate

Apr 23, 2018 10:00:00 AM By Stu Sjouwerman

We thought it was bad when we saw Cyren's recent analysis that 10.5% of bad emails made it through the filters. It could even be worse than that. "Mimecast's latest ESRA (email security ...

[On-Demand Webinar] The Science and Methodology Behind Social Engineering

Apr 17, 2018 10:51:55 AM By Stu Sjouwerman

No matter how much security technology we purchase, we still face a fundamental security problem: people. Our CEO Stu Sjouwerman was interviewed by Information Security Media Group at RSA ...

Poll: What Security Measures Are Most Effective In Fighting Ransomware?

Apr 17, 2018 10:15:00 AM By Stu Sjouwerman

The Spiceworks staff wrote: "Years after CryptoLocker raised its ugly head — setting off an unfortunate security trend — ransomware continues to be a rather painful thorn in the side of ...

CyberheistNews Vol 8 #16 [Heads-Up] Phishing Scam of the Week

Apr 16, 2018 9:42:00 AM By Stu Sjouwerman

Many of us will be at the RSA Conference in SanFran this week. Here are some quick tips!

Apr 15, 2018 9:59:50 AM By Stu Sjouwerman

Lance Spitzner said: Eat breakfast, it may be the last meal you get that day. Schedule the most important meetings in the morning. RSA gives you a back-pack. Don't use it at the con, ...

Britain braces for Russian cyber warfare targeting transport links, water supplies, hospitals and airports

Apr 15, 2018 9:31:22 AM By Stu Sjouwerman

The UK Mirror reported that Britain is braced for a wave of crippling cyber attacks in Russian retaliation for the Syrian missile strikes. Here is an excerpt: "Vital transport links, ...

Positive Technologies Social Engineering Report: 17 Percent Fall Foul To “Attacks”

Apr 14, 2018 11:54:50 AM By Stu Sjouwerman

Employees download malicious files, click phishing links, correspond with hackers, and even share contact information for their colleagues. Positive Technologies has released a new report ...

[NEW WHITEPAPER] 10 Best Practices for Protecting Against Phishing, Ransomware and Email Fraud

Apr 14, 2018 11:12:25 AM By Stu Sjouwerman

Organizations have been victimized by a wide range of threats and exploits, most notably phishing attacks that have penetrated corporate defenses, targeted email attacks launched from ...

Ransomware, Phishing, and Pretexting in the Annual Verizon Databreach Report

Apr 14, 2018 10:44:37 AM By Stu Sjouwerman

Did you know, 43% of breaches result from social engineering attacks? What's more, according to a recent Verizon investigation, phishing emails account for 98% of all social engineering ...

State Department warns staff of surge in spear phishing attempts

Apr 13, 2018 10:05:33 AM By Stu Sjouwerman

Eric Geller at Politico reported: "The State Department on Thursday warned employees about a tidal wave of malicious messages attempting to trick staffers into opening a door for hackers. ...

How The World's Most Famous Hacker Tracks Down Lost Luggage...

Apr 12, 2018 8:19:13 PM By Stu Sjouwerman

The adventures of Kevin Mitnick and his girlfriend Kimberly. Kevin called me and told me a story how they were crazy enough to track down a lost (stolen?) bag in Mexico city. His GF ...

[Heads-Up] Phishing Scam Of The Week: Bad Guys Go Nuclear

Apr 12, 2018 7:28:18 AM By Stu Sjouwerman

So, this one is the next new criminal low. This particular phish spoofs a campus-wide security alert for a community college (confidential information blocked out) in Florida. Given that ...

Security Awareness Training Blog

View Topics