Security Awareness Training Blog

Keeping You Informed. Keeping You Aware.
Stay on top of the latest in security including social engineering, ransomware and phishing attacks.

Stu Sjouwerman

Chief Executive Officer & President

Stu Sjouwerman (pronounced “shower-man”) is the founder and CEO of KnowBe4, Inc., which hosts the world’s most popular integrated security awareness training and simulated phishing platform, with over 54,000 organization customers and more than 50 million users. A serial entrepreneur and data security expert with 30 years in the IT industry, Stu was the co-founder of Inc. 500 company Sunbelt Software, a multiple award-winning anti-malware software company that was acquired in 2010.


Recent Posts

New COVID-19 Phishing Wave Misuses Google Forms to Steal Victim Information

This new credential harvesting scam impersonates a real U.S. Government COVID-related grant program to harvest credentials and personal details using a blatantly obvious Google form.
Continue Reading

91% of Organizations are Concerned About Ransomware Attacks in 2022

With ransomware attacks becoming more frequent, evasion getting more sophisticated, and ransoms increasing, new data shows organizations aren’t fighting for staff and budget.
Continue Reading

[HEADS UP] South African Post Office Sends Warning of Targeted Phishing Attacks

The South Africa Post Office (SAPO) recently warned customers of phishing emails to portray the post office. These cybercriminals are asking for outstanding customs fees that require ...
Continue Reading

WSJ: "Cybersecurity Tops the CIO Agenda as Threats Continue to Escalate"

Steven Rosenbush at the WSJ reported: "Chief information officers say cybersecurity once again will be their top investment priority in 2023, a sign of how companies are racing to manage ...
Continue Reading

Name-and-Shame Scams on Discord

Scammers are sending Discord messages with phony accusations to trick users into clicking on phishing links, according to Shan Abdul at MakeUseOf. The messages are sent from compromised ...
Continue Reading

Sloppy but Dangerous: Fake Ransomware

Conventional ransomware encrypts the victims’ files and holds them hostage, unavailable to their owners, promising to provide a decryptor once the victims pay the ransom. In some cases ...
Continue Reading

Cyberattacks are the biggest risk to the UK financial system – Bank of England research

Cyberattacks are the biggest risk to the UK financial system, according to new research from the Bank of England.
Continue Reading

New Phishing Campaign Uses Office Docs to Install Cobalt Strike Beacon

Under the guise of determining applicant eligibility for a U.S. federal government job, this latest phishing attack plants the seed for a future attack on the victim organization.
Continue Reading

Cyber-Zombie Apocalypse: Ransomware Gangs Continue to Come Back from the Dead

With ransomware gangs making so much money and then dropping off the face of the earth, what’s the motivation to come back to life and potentially risk getting caught?
Continue Reading

German Hackers Arrested for Stealing €4 Million in 7-Month Banking Phishing Scams

The recent arrest demonstrates how very small and unsophisticated a cybercriminal team can be to launch a very successful phishing campaign that takes victims for millions.
Continue Reading

Small Business Grants as Phishbait

INKY has published a report on the use of small business grants as phishing lures. Scammers are impersonating the US Small Business Administration (SBA) to distribute phony grant ...
Continue Reading

A New Phishing-as-a-Service Kit

Researchers at Mandiant have published an analysis of a phishing-as-a-service kit called “Caffeine,” which further lowers the bar for inexperienced cybercriminals by offering a publicly ...
Continue Reading

79 Million Malicious Domains Flagged in the First Half of 2022

Security researchers at Akamai identify an average of 13 million newly observed domains (NOD) each month this year, representing about 20% of the NODs resolved in the same timeframe.
Continue Reading

Three-Quarters of Ethical Hackers Can Collect and (Potentially) Exfiltrate Data in 10 Hours or Less

New insight from the SANS Institute surveying 300 ethical hackers sheds some light on how they perceive your security stance – and how easy it is for them to break in despite your efforts.
Continue Reading

Encrypted Files are the Overwhelming Way Organizations “Detect” Ransomware Attacks

New analysis of cyberattacks shows that organizations aren’t able to properly detect ransomware attacks, resulting in a majority of victims paying the ransom to retrieve data.
Continue Reading

[Heads Up] Almost 19 percent of phishing emails bypass Microsoft Defender

Check Point Software is one of the world's best-known and largest infosec companies. In September 2021 they acquired email security company Avanan and recently they updated Check Point's ...
Continue Reading

[Head Scratcher] The cyber insurance market is badly broken. But why exactly?

Greg Noone at the Techmonitor site covered this problem early October 2022, starting with a horror story.
Continue Reading

KnowBe4 Celebrates Winning a Tech Cares Award From TrustRadius 2022

For the third consecutive year, we received a Tech Cares Award from TrustRadius! This third annual award celebrates companies that have gone above and beyond to provide strong Corporate ...
Continue Reading

Get the latest about social engineering

Subscribe to CyberheistNews