Stu Sjouwerman

Chief Executive Officer & President

Stu Sjouwerman (pronounced “shower-man”) is the founder and CEO of KnowBe4, Inc., which hosts the world’s most popular integrated security awareness training and simulated phishing platform, with over 54,000 organization customers and more than 50 million users. A serial entrepreneur and data security expert with 30 years in the IT industry, Stu was the co-founder of Inc. 500 company Sunbelt Software, a multiple award-winning anti-malware software company that was acquired in 2010.

Books

Cyberheist E-Book

Find all of Stu's books on Amazon

[Watch Your Back] New Fake Chrome Update Error Attack Targets Your Users

May 2, 2023 10:34:03 AM By Stu Sjouwerman

Compromised websites (legitimate sites that have been successfully compromised to support social engineering) are serving visitors fake Google Chrome update error messages.

CyberheistNews Vol 13 #18 [Eye on AI] Does ChatGPT Have Cybersecurity Tells?

May 2, 2023 9:00:00 AM By Stu Sjouwerman

CyberheistNews Vol 13 #18 | May 2nd, 2023 [Eye on AI] Does ChatGPT Have Cybersecurity Tells? Poker players and other human lie detectors look for "tells," that is, a sign by which someone ...

Phishing as an Espionage Tactic for Cybercriminals

May 2, 2023 8:21:31 AM By Stu Sjouwerman

Phishing is a familiar criminal tactic. It’s also used by intelligence services for cyber espionage campaigns. On Friday, April 28th, 2023, CERT-UA, Ukraine’s Computer Emergency Response ...

Phishing Attack Frequency Rises Nearly 50% as Some Sectors Increase by as Much as 576%

May 1, 2023 10:31:33 AM By Stu Sjouwerman

New data provides a multi-faceted look at the changing face of phishing attacks. This data includes who’s being targeted, the tactics being used, and why phishing attacks continue to work.

Automate Reporting for Security Awareness Training Events and Suspicious Email Remediation Management with Cortex XSOAR and KnowBe4

May 1, 2023 8:00:00 AM By Stu Sjouwerman

Security teams face unique challenges in today’s rapidly-changing landscape of phishing, malware, and other social engineering and cybersecurity threats. Collaboration across disparate ...

Your KnowBe4 Fresh Content Updates from April 2023

Apr 28, 2023 8:00:00 AM By Stu Sjouwerman

Check out the 19 new pieces of training content added in April, alongside the always fresh content update highlights, events and new features.

Heart of the Matter: How LLMs Can Show Political Bias in Their Outputs

Apr 28, 2023 6:59:09 AM By Stu Sjouwerman

Wired just published an interesting story about political bias that can show up in LLM's due to their training. It is becoming clear that training an LLM to exhibit a certain bias is ...

[Eyes Wide Shut] Fed Powell's Call with Russian Pranksters Exposed as Social Engineering

Apr 28, 2023 6:17:37 AM By Stu Sjouwerman

It was all over the news. Fed's Jerome Powell was social engineered by Russian pranksters posing as Zelensky.

[Live Demo] Customizing Your Compliance Training to Increase Effectiveness

Apr 27, 2023 1:24:03 PM By Stu Sjouwerman

Linking compliance training to specific outcomes is hard. Compliance training has a reputation for being challenging for organizations to offer, difficult to do right and employees are ...

Does ChatGPT Have Cybersecurity Tells?

Apr 27, 2023 8:46:59 AM By Stu Sjouwerman

Poker players and other human lie detectors look for “tells,” that is, a sign by which someone might unwittingly or involuntarily reveal what they know, or what they intend to do. A ...

Latest QBot Attacks Use a Mixture of PDF Attachments and Windows Scripting Host Files to Infect Victims

Apr 27, 2023 8:08:22 AM By Stu Sjouwerman

QBot malware seems to be outliving its competitors through innovative new ways to socially engineer victims into helping install it.

Scammers Impersonate Zelle via the Lure of “Getting Paid” to Get Paid Themselves

Apr 27, 2023 8:08:07 AM By Stu Sjouwerman

A new impersonation scam targets users of the popular pay platform under the guise of the victim having money coming to them and with the goal to obtain Zelle credentials.

Despite a Majority of Organizations Believing They’re Prepared for Cyber Attacks, Half Were Still Victims

Apr 27, 2023 8:07:48 AM By Stu Sjouwerman

A new survey points to an overconfidence around organization’s preparedness, despite admitting to falling victim to ransomware attacks – in some cases multiple times.

Organizations Have No Idea of a Data Breach’s Root Cause in 42% of Reported Cases

Apr 27, 2023 8:07:38 AM By Stu Sjouwerman

New data shows how poorly organizations are at identifying – let alone removing – an attacker's foothold, putting themselves at continued risk of further attacks and data breaches.

Recruiting Money Mules

Apr 26, 2023 4:28:05 PM By Stu Sjouwerman

Money mules play a subordinate but important role in the criminal economy. They’re used to move stolen funds around, a low-level version of illicit remittance and money laundering. ...

Fake Meta Tech Support Profiles for Fraud

Apr 26, 2023 8:06:56 AM By Stu Sjouwerman

Researchers at Group-IB have found an extensive campaign in which criminal operators have created a large number of fake Facebook profiles that repost messages in which the scammers ...

CyberheistNews Vol 13 #17 [Head Start] Effective Methods How To Teach Social Engineering to an AI

Apr 25, 2023 9:00:00 AM By Stu Sjouwerman

CyberheistNews Vol 13 #17 | April 25th, 2023 [Head Start] Effective Methods How To Teach Social Engineering to an AI Remember The Sims? Well Stanford created a small virtual world with 25 ...

Another Perspective on ChatGPT's Social Engineering Potential

Apr 24, 2023 3:54:51 PM By Stu Sjouwerman

We’ve had occasion to write about ChatGPT’s potential for malign use in social engineering, both in the generation of phishbait at scale and as a topical theme that can appear in lures. ...

FBI Warns of Sextortion Scams that Yield a New Equally Scam-Like Service: Sextortion Assistance

Apr 21, 2023 3:45:11 PM By Stu Sjouwerman

A FBI bulletin highlights a new twist in the sextortion game: companies claiming to assist with addressing sextortion who use deceptive social engineering tactics to coerce victims into ...

Phishing for Credentials in Social Media-Based Platform Linktree

Apr 21, 2023 8:14:44 AM By Stu Sjouwerman

Social media is designed of course to connect, but legitimate modes of doing so can be abused. One such case of abuse that’s currently running involves Linktree, a kind of meta-medium for ...

Security Awareness Training Blog

View Topics