Stu Sjouwerman

Chief Executive Officer & President

Stu Sjouwerman (pronounced “shower-man”) is the founder and CEO of KnowBe4, Inc., which hosts the world’s most popular integrated security awareness training and simulated phishing platform, with over 54,000 organization customers and more than 50 million users. A serial entrepreneur and data security expert with 30 years in the IT industry, Stu was the co-founder of Inc. 500 company Sunbelt Software, a multiple award-winning anti-malware software company that was acquired in 2010.

Books

Cyberheist E-Book

Find all of Stu's books on Amazon

Twilio hacked by phishing campaign targeting internet companies

Aug 8, 2022 3:38:47 PM By Stu Sjouwerman

Communications giant Twilio has confirmed hackers accessed customer data after successfully tricking employees into handing over their corporate login credentials.

WSJ: "Cyber Insurance Prices Soar"

Aug 8, 2022 1:51:46 PM By Stu Sjouwerman

The WSJ reported Aug 8, 2020: It is becoming more expensive and difficult for companies to get or renew cyber insurance. The price of U.S. cyber insurance policies increased by 79% from a ...

Cybercriminals Go to College with New Phishing Attacks

Aug 8, 2022 9:23:42 AM By Stu Sjouwerman

The summer is winding up, and the traditional academic year is approaching. And amid the welcomes from the deans of students, the activities coordinators, the academic advisors and so on, ...

LinkedIn Continues its Reign as the Most-Impersonated Brand in Phishing Attacks

Aug 4, 2022 1:09:44 PM By Stu Sjouwerman

As cybercriminals look for novel and effective ways to gain entrance to a victim network, LinkedIn is proving to be fruitful enough to keep the attention of phishing scammers.

Ransomware Attack Downtime Costs in the U.S. Rise to Nearly $160 Billion

Aug 4, 2022 1:09:40 PM By Stu Sjouwerman

New data based on tracked, publicly-confirmed ransomware attacks shows that downtime – and the associated cost – is increasing at an alarming rate as nearly half of attacks see a ransom ...

Open Redirects Exploited for Phishing

Aug 4, 2022 11:21:34 AM By Stu Sjouwerman

Attackers are exploiting open redirects to distribute links to credential-harvesting sites, according to Roger Kay at INKY. The attackers are exploiting vulnerable American Express and ...

KnowBe4 Wins Multiple Summer 2022 "Best of" Awards From TrustRadius

Aug 4, 2022 7:30:00 AM By Stu Sjouwerman

KnowBe4 is proud to be recognized by TrustRadius with the Summer Best of Awards in three categories for the Security Awareness Training software category.

On-Demand Webinar: New 2022 Phishing By Industry Benchmarking Report: How Does Your Organization Measure Up

Aug 3, 2022 11:28:49 AM By Stu Sjouwerman

As a security leader, you have a lot on your plate. Even as you increase your budget for sophisticated security software, your exposure to cybercrime keeps going up. IT security seems to ...

Labor Market Social Engineering: Supply-Side and Demand-Side

Aug 3, 2022 8:50:05 AM By Stu Sjouwerman

We’re accustomed to social engineering being used for credential theft and business email compromise. We’re also accustomed to hearing about the increase in remote work during the ...

New Data Breach Extortion Attack Begins with a Fake Duolingo or MasterClass Subscription Scam

Aug 3, 2022 8:50:01 AM By Stu Sjouwerman

The cybercriminal gang, dubbed ‘Luna Moth’ uses a sophisticated mix of phishing, vishing, remote support sessions, and remote access trojans to gain control of victim endpoints.

CyberheistNews Vol 12 #31 [Heads Up] Crafty Microsoft USB Scam Shows the Importance of Security Awareness Training

Aug 2, 2022 9:38:15 AM By Stu Sjouwerman

Cyber Insurance Expected to Continue to Rise as Sophistication and Cost of Ransomware Attacks Increase

Aug 2, 2022 9:07:39 AM By Stu Sjouwerman

New data about the state of cyber insurance shows that given the current loss ratios by insurers – and the reasons behind those losses – will result in higher premiums for the foreseeable ...

Experian Customer “Impersonation” Account Takeover Uncovered by KrebsOnSecurity

Aug 2, 2022 9:07:35 AM By Stu Sjouwerman

After a few notifications of a potential problem with Experian by his readership, Brian Krebs and team checked out Experian’s account signup process and found some disturbing news.

A Widespread, Multistage Investment Scam

Aug 1, 2022 8:44:56 AM By Stu Sjouwerman

A complex and ambitious investment scam has used more than 10,000 domains to induce speculators to give up not just funds, but personal information as well. Researchers at security firm ...

Happy 23rd Annual SysAdmin Day from KnowBe4!

Jul 29, 2022 7:30:00 AM By Stu Sjouwerman

It's been 23 years of celebrating all of our fellow System Administrators! Your hard work on daily maintenance of your company's day-to-day computer operations definitely deserves kudos.

Your KnowBe4 Fresh Content Updates from July 2022

Jul 29, 2022 7:00:00 AM By Stu Sjouwerman

Check out the thirteen new pieces of training content added in July, alongside the always fresh content update highlights and new features.

Phishing-Based Data Breaches Take 295 Days to Contain and Breach Costs Soar to $4.91 Million

Jul 28, 2022 12:33:36 PM By Stu Sjouwerman

Fresh data on data breach costs from IBM show phishing, business email compromise, and stolen credentials take the longest to identify and contain.

Microsoft 365 Users are Once Again the Target of Phishing Scams using Fake Voice Mail Messages

Jul 28, 2022 9:04:04 AM By Stu Sjouwerman

Using a simple email containing a voice mail attachment, an ingenious phishing attack captures credentials while keeping track of the domains being attacked.

Hackers Use Free Email Accounts from QuickBooks to Launch Spoofed Phishing Attacks

Jul 28, 2022 9:04:00 AM By Stu Sjouwerman

A new attack uses one brand email domain to increase the chances of reaching an Inbox, while spoofing another brand to trick users into transitioning to a vishing attack.

Spear Phishing Campaign Targets Facebook Business Accounts

Jul 28, 2022 9:03:57 AM By Stu Sjouwerman

Researchers at WithSecure have discovered a spear phishing campaign targeting employees who have access to Facebook Business accounts. The attackers are targeting specific employees, and ...

Security Awareness Training Blog

View Topics