Stu Sjouwerman

Chief Executive Officer & President

Stu Sjouwerman (pronounced “shower-man”) is the founder and CEO of KnowBe4, Inc., which hosts the world’s most popular integrated security awareness training and simulated phishing platform, with over 54,000 organization customers and more than 50 million users. A serial entrepreneur and data security expert with 30 years in the IT industry, Stu was the co-founder of Inc. 500 company Sunbelt Software, a multiple award-winning anti-malware software company that was acquired in 2010.

Books

Cyberheist E-Book

Find all of Stu's books on Amazon

Energy Sector Experiences Three Times More Operational Technology Cybersecurity Incidents Than Any Other Industry

Oct 9, 2023 8:14:04 AM By Stu Sjouwerman

While industries like financial services and healthcare tend to dominate in IT attacks, the tables are turned when looking at Operational Technology (OT) cyber attacks – and the energy ...

Stay a Step Ahead of your #1 Downtime Threat - Business Email Compromise

Oct 9, 2023 5:00:00 AM By Stu Sjouwerman

A new report from Secureworks has found that business email compromise (BEC) remains “one of the most financially damaging online crimes overall for orgs” in 2023. The security firm’s ...

The Role of AI in Email Security and How Real-Time Threat Intelligence Can Supercharge Your SOC Team

Oct 6, 2023 12:43:38 PM By Stu Sjouwerman

In response to improved email security measures, cybercriminals have pivoted to more advanced attack methods, namely artificial intelligence (AI), that bypass existing protections. But ...

Clorox Experiences Significant Financial Loss Stemming From Recent Cyber Attack

Oct 6, 2023 9:53:51 AM By Stu Sjouwerman

American global manufacturer of cleaning products Clorox stated that recent sales and profit loss were related to a cyber attack.

[Risky New Data] More than Half of Phishing Scams Now Use Obfuscation

Oct 5, 2023 3:26:33 PM By Stu Sjouwerman

A new report shows staggering phishing trends using obfuscation techniques that should make any organization feel worried.

New Gartner Forecast Shows Global Security and Risk Management Spending to Increase by 14% in 2024

Oct 5, 2023 3:26:29 PM By Stu Sjouwerman

Gartner issued a press release that forecasted global security and risk management end-user spending to reach $188.1 billion, along with worldwide end-user spending on security and risk ...

[FREE RESOURCES] Celebrate Cybersecurity Awareness Month This October with our Cyber-Monsters!

Oct 5, 2023 10:11:18 AM By Stu Sjouwerman

Cyber threats can be scary, and for good reason.

Senior Executives Beware: The Rise of EvilProxy Phishing Campaigns

Oct 5, 2023 8:20:01 AM By Stu Sjouwerman

Menlo Security warns that a social engineering campaign is using the EvilProxy phishing kit to target senior executives across a range of industries, including banking and financial ...

Open-Source Intelligence (OSINT): Learn the Methods Bad Actors Use to Hack Your Organization

Oct 4, 2023 10:55:26 AM By Stu Sjouwerman

They are out there, watching and waiting for an opportunity to strike; the bad actors who have carefully researched your organization in order to set the perfect trap using easily found ...

Generative AI and the Automation of Social Engineering Increasingly Used By Threat Actors

Oct 3, 2023 10:43:44 AM By Stu Sjouwerman

Threat actors continue to use generative AI tools to craft convincing social engineering attacks, according to Glory Kaburu at Cryptopolitan.

[HEADS UP] Aurora Police Department Warns of Contactless Payment Processors Scams

Oct 3, 2023 10:31:37 AM By Stu Sjouwerman

If you didn't trust contactless payment processors before, you really won't after hearing about this recent scam.

CyberheistNews Vol 13 #40 Why BJ Fogg and Daniel Kahneman Are Big Security Pro Must-Knows

Oct 3, 2023 9:00:00 AM By Stu Sjouwerman

Lazarus Attack on Spanish Aerospace Company Started with Messages from Phony Meta Recruiters

Oct 2, 2023 12:29:11 PM By Stu Sjouwerman

A recent attack on an undisclosed Spanish aerospace company all started with messages to the company's employees that appeared to be coming from Meta recruiters, via LinkedIn Messaging. ...

New SMS Phishing Campaign Impersonating The US Postal Service

Oct 2, 2023 10:45:00 AM By Stu Sjouwerman

DomainTools is tracking an increase in SMS phishing (or “smishing”) campaigns impersonating the US Postal Service (USPS). The text messages inform recipients that there’s a problem with ...

Your KnowBe4 Fresh Content Updates from September 2023

Sep 29, 2023 9:00:00 AM By Stu Sjouwerman

Check out the 66 new pieces of training content added in September, alongside the always fresh content update highlights, events and new features.

[Live Demo] Ridiculously Easy Security Awareness Training and Phishing

Sep 29, 2023 8:00:00 AM By Stu Sjouwerman

Old-school awareness training does not hack it anymore. Your email filters have an average 7-10% failure rate; you need a strong human firewall as your last line of defense.

[Heads Up] China Invests Billions in Huge Global Disinformation Campaign

Sep 28, 2023 4:32:02 PM By Stu Sjouwerman

Dustin Volz from the WSJ dropped a huge scoop today. This is rocket fuel infosec budget ammo I would send to my C-suite in a New York minute. They said: "Fake authors, bot armies and ...

Ransomware Now Considered a “Crisis” in the Financial Services Sector

Sep 28, 2023 4:20:16 PM By Stu Sjouwerman

A recent panel discussion of banking CISOs and experts at the SIBOS conference focused on the current state of ransomware and what institutions should do to protect themselves.

It’s Official – Generative AI Has Made Phishing Emails Foolproof

Sep 28, 2023 4:20:04 PM By Stu Sjouwerman

The most basic use of tools like ChatGPT to script out professional-looking emails has all but eliminated improperly written content as an indicator of a potential phishing scam.

Threat Group UNC3944 Continues to See Success Using Text-Based Social Engineering

Sep 28, 2023 4:19:51 PM By Stu Sjouwerman

A new update on UNC3944 group's activities shows how they are evolving their focus squarely on SMiShing credential harvesting attacks that result in data theft/extortion attacks.

Security Awareness Training Blog

View Topics