Stu Sjouwerman

Chief Executive Officer & President

Stu Sjouwerman (pronounced “shower-man”) is the founder and CEO of KnowBe4, Inc., which hosts the world’s most popular integrated security awareness training and simulated phishing platform, with over 54,000 organization customers and more than 50 million users. A serial entrepreneur and data security expert with 30 years in the IT industry, Stu was the co-founder of Inc. 500 company Sunbelt Software, a multiple award-winning anti-malware software company that was acquired in 2010.

Books

Cyberheist E-Book

Find all of Stu's books on Amazon

New Multi-Stage Word Phishing Attack Infects Users Without Using Macros

Feb 15, 2018 11:06:24 AM By Stu Sjouwerman

Spam distributors are using a new technique to infect users with malware, and while this phishing attack relies on having users open Word documents, it does not involve social engineering ...

Lazarus Hacking Group back with new phishing campaign targeting banks and bitcoin users

Feb 15, 2018 10:50:24 AM By Stu Sjouwerman

The North Korean Lazarus Hacking Group, suspected to be behind the WannaCry ransomware attack last year, has returned with a new crime spree, this time targeting financial institutions ...

Security Awareness Training Top Priority for CISOs: Report [PDF]

Feb 14, 2018 11:07:32 AM By Stu Sjouwerman

SecurityWeek's Kevin Townsend wrote an excellent summary of the brand new FS-ISAC - "CISO Cybersecurity Trends Study": "Thirty-five percent of CISOs in the financial sector consider staff ...

CyberheistNews Vol 8 #7 [Heads-up] 2018 Winter Olympics Phishing Campaign Hides Evil Script in Image

Feb 13, 2018 9:30:54 AM By Stu Sjouwerman

KnowBe4 Attains SOC 2 Type I Compliance For The Hosted Phishing And Training Product Offerings

Feb 11, 2018 1:59:38 PM By Stu Sjouwerman

KnowBe4, Inc, the world's largest security awareness training and simulated phishing platform, this week announced it has successfully completed a Service Organization Controls (SOC) 2 ...

WHAT IS “REASONABLE CYBER SECURITY” AND HOW DO COURTS VIEW IT?

Feb 11, 2018 6:59:53 AM By Stu Sjouwerman

Shawn Tuma is an attorney with an internationally recognized reputation in cybersecurity, computer fraud, and data privacy law. He is a Cybersecurity & Data Privacy Attorney at Scheef ...

New Trend In Phishing: Conversation Hijacking

Feb 10, 2018 9:44:47 AM By Stu Sjouwerman

Researchers see a new trend in phishing. Hackers are inserting themselves into email conversations between parties known to and trusted by one another. Once in, they exploit that trust to ...

2018 Winter Olympics Phishing Campaign Hides Evil PowerShell Script In Image

Feb 9, 2018 7:22:05 AM By Stu Sjouwerman

Jonathan, at our friends at Barkly wrote: "Hi all, according to researchers at McAfee, a new malware campaign is targeting organizations associated with the upcoming 2018 Winter Olympics ...

Tennessee Hospital Hit With Cryptojacking Attack Sends Out Databreach Notification

Feb 9, 2018 7:03:22 AM By Stu Sjouwerman

Decatur County General Hospital is notifying 24,000 patients of cryptomining software on its EMR system. In what may be the first report I’ve seen of a hospital having their EMR server ...

KnowBe4 Introduces New Feature: Industry Benchmarking

Feb 9, 2018 6:27:03 AM By Stu Sjouwerman

You have probably seen our recent benchmarking study, drawn from a data set of more than six million users across over 23,000 organizations, showing real-world phishing results over time. ...

The Simulated Phishing Market Enters Early Adolescence

Feb 7, 2018 7:57:15 AM By Stu Sjouwerman

By Perry Carpenter, KnowBe4 Chief Evangelist and Strategy Officer We certainly live in fun times: Barracuda acquiring PhishLine Microsoft adding limited phishing simulation to Office 365 ...

KnowBe4 Fresh Content Update & New Features Summary Jan 2018

Feb 6, 2018 1:04:46 PM By Stu Sjouwerman

A lot of new modules have been added to the KnowBe4 ModStore: We refreshed 26 Language versions for our 15 min KMSAT course. (Available now). 20 language versions for Ransomware will be ...

Microsoft Confirms: "Sending Simulated Phishing Attacks to Your Employees Is a Must"

Feb 5, 2018 10:00:00 AM By Stu Sjouwerman

Well, Microsoft just legitimized the whole new-school security awareness training market. I'm pleased to note that Microsoft has finally acknowledged that organizations need to send ...

CyberheistNews Vol 8 #5 Scam of the Week: Wave of Payroll Direct Deposit Phishing Attacks

Feb 5, 2018 9:51:18 AM By Stu Sjouwerman

Cisco: "Cybercrime Swaps Ransomware For Cryptomining, Generating Millions"

Feb 5, 2018 7:14:15 AM By Stu Sjouwerman

Cisco's Talos Threat Intelligence team has a good observation. Cybercriminals can just steal CPU/GPU cycles and directly generate any cryptocurrency without infecting the system with ...

Who's Behind This Massive Wave of DDoS and Phishing Attacks Targeting Dutch Banks?

Feb 4, 2018 12:28:25 PM By Stu Sjouwerman

Shortly after the Dutch Volkskrant newspaper story about Netherlands Intelligence agencies compromising the prominent Russsian Cozy Bear hacking group and providing the US with ...

Phishing Messages from the Dark: When the Bad Guys Write Back

Feb 2, 2018 11:42:09 AM By Stu Sjouwerman

By Eric Howes, KnowBe4 Principal Lab Researcher. For most users the experience of dealing with phishing emails is a solitary experience, whether they recognize that they are under attack ...

Which is the most dangerous global hacking cyber group? – AlienVault research

Feb 2, 2018 11:28:37 AM By Stu Sjouwerman

AlienVault researchers have listed Sofacy, also known as Fancy Bear or APT28, as the most capable hacking group in the world. This was based on ranking the top threat actors which have ...

Scam of The Week: Wave Of Payroll Direct Deposit Phishing Attacks

Feb 1, 2018 3:34:57 PM By Stu Sjouwerman

Lexology had an excellent post from Ogletree Deakins by Rebecca J. Bennett and Danielle Vanderzanden, related to a crafty new phishing scam they warned for and that you should be aware ...

What are “WannaMine” attacks, and how do I avoid them?

Feb 1, 2018 7:50:39 AM By Stu Sjouwerman

It's suddenly all over the news. In hindsight, it was a matter of "not if, but when". Sophos just warned against a new hybrid worm that combines the ETERNALBLUE exploit and cryptomining. ...

Security Awareness Training Blog

View Topics