Roger Grimes

Data-Driven Defense Evangelist

Roger A. Grimes, Data-Driven Defense Evangelist for KnowBe4, Inc., is the author of 15 books and over 1500 articles, specializing in host security and preventing hacker and malware attacks. Roger is a frequent speaker at national computer security conferences and his presentations are fast-paced and filled with useful facts and recommendations.

Request This Speaker

Webinars

Videos and Vlogs

Roger's Cybersecurity WTF Rants

Podcasts

Books

Whitepapers

Articles

Fake MFA Reset Warning Message

Jun 6, 2025 8:37:54 AM By Roger Grimes

A KnowBe4 co-worker of mine recently got this SMS phishing message (i.e., smish).

If I Had Only 20 Seconds To Teach People How To Avoid Scams

May 27, 2025 4:04:16 PM By Roger Grimes

Human risk management involves more than security awareness training, but training is a huge part of the mix.

Beware of Coinbase Scams

May 19, 2025 4:43:51 PM By Roger Grimes

I got this Coinbase-related scam in my personal inbox last week.

Agentic AI Ransomware Is On Its Way

May 16, 2025 2:08:42 PM By Roger Grimes

Agentic AI-enabled ransomware is not here yet, but likely will be very soon. I am talking this year or by 2026.

You Are Still Vulnerable to Password Attacks When Using Passkeys

May 9, 2025 2:26:01 PM By Roger Grimes

Just because you’re using a passkey doesn’t mean your password is gone.

Xfinity Scam Might Explain Similar Scams

May 1, 2025 4:30:01 PM By Roger Grimes

Recently, I covered a T-Mobile scam where a friend of mine narrowly avoided losing money. In that scam, the attackers called up pretending to be from T-Mobile offering him a ...

A Sneaky T-Mobile Scam and Lessons That Were Learned

Apr 30, 2025 4:41:50 PM By Roger Grimes

A friend of mine got a call on his phone and he regrettably picked it up. The number was 267-332-3644. The area code is from Bucks County, PA, where he used to live many years ago.

What Is Device Code Phishing?

Apr 29, 2025 10:46:50 AM By Roger Grimes

Ever since Microsoft’s initial announcement on February 13, 2025, about a Russian nation-state phishing campaign using "device code phishing," many people have been wondering what it is. ...

[Scary] A New Real Cash Scam Sweeps Across the U.S. Warn Your Family and Friends!

Apr 17, 2025 4:32:24 PM By Roger Grimes

Right now, today, thousands of people are being tricked into going to their banks or credit unions to withdraw large sums of cash and will give or send it to a complete stranger, never to ...

Scammers Can Be Victims Too

Mar 20, 2025 10:27:52 AM By Roger Grimes

There are thousands of people worldwide trying to scam you, hoping they can make you a victim, steal your money, and harm you in some way. While some of it is done by individuals or small ...

Agentic AI: Why Cyber Defenders Finally Have the Upper Hand

Mar 18, 2025 10:27:16 AM By Roger Grimes

My two previous recent postings on AI covered “Agentic AI” and how that impacts cybersecurity and the eventual emergence of malicious agentic AI malware.

Make Your Real Emails Less Phishy

Mar 13, 2025 9:14:05 AM By Roger Grimes

I infrequently get emails from customers who are frustrated because their employer sent out some legitimate mass email to all employees that unfortunately had all the hallmarks of a ...

Autonomous Agentic AI-Enabled Deepfake Social Engineering Malware is Coming Your Way!

Mar 10, 2025 9:17:27 AM By Roger Grimes

I’ve been in the cybersecurity industry for over 36 years. Surprisingly, hackers and malware haven't changed all that much.

Software Will Become Agentic and the Security Lessons We Need To Learn

Mar 7, 2025 9:14:24 AM By Roger Grimes

Ever since OpenAI publicly released ChatGPT in late 2022, people have been predicting the end of programmers.

Primary Refresh Tokens Aren’t Your Parent’s Browser Token

Mar 4, 2025 9:40:59 AM By Roger Grimes

If you haven’t been paying attention closely enough, a new type of access control token, like a super browser token on steroids, is becoming hackers' theft target of choice.

[NEW] KnowBe4 Interviews a Fake North Korean Employee

Feb 24, 2025 8:43:19 AM By Roger Grimes

You would think with all the global press we have received because of our public announcement of how we mistakenly hired a North Korean fake employee in July 2024, followed by our ...

Effective Security Awareness Training Really Does Reduce Data Breaches

Jan 17, 2025 4:53:23 PM By Roger Grimes

Social engineering and phishing are involved in 70% - 90% of data breaches. No other root cause of malicious hacking (e.g., unpatched software and firmware, eavesdropping, cryptography ...

Brad Pitt Romance Scams Pushed By AI-Enabled Deepfakes

Jan 17, 2025 8:31:27 AM By Roger Grimes

I have helped people detect romance scams for decades. It is still very common for romance scammers to leverage both pictures of celebrities and pictures of innocent, everyday people as ...

"Get Beyond Security Awareness Training" Does Not Mean Forgetting About It

Dec 23, 2024 5:13:52 PM By Roger Grimes

KnowBe4 is a big believer in focusing on decreasing human risk as the best way to decrease cybersecurity risk in most environments.

James Bond-Style Scamming Profits Explode

Dec 20, 2024 3:48:39 PM By Roger Grimes

There is a type of scam where victims are contacted by someone fraudulently posing as a popular trusted entity (e.g., Amazon, U.S. Post Office, etc.), law enforcement, or an intelligence ...

Security Awareness Training Blog

View Topics