Roger Grimes

Data-Driven Defense Evangelist, KnowBe4

Roger A. Grimes is a Data-Driven Defense Evangelist at KnowBe4. He is a 35-year plus computer security professional, author of 14 books and over 1,400 national magazine articles. He frequently consults with the world’s largest and smallest companies, and militaries, and he has seen what does and doesn’t work.

Grimes was previously a weekly security columnist for InfoWorld and CSO magazines from 2005–2019. He regularly presents at national computer security conferences, and has been interviewed by national magazines and radio shows, including Newsweek magazine and NPR’s “All Things Considered.” Roger is known for his often contrarian, fact-filled viewpoints.

OnDemand | Hacking the Hacker: Assessing and Addressing Your Organization’s Cyber Defense Weaknesses

Presented by Roger Grimes • October 24, 2022

Cybercriminals are out there, watching and waiting for the perfect opportunity. They are gathering information about your organization and users, devising the perfect plan to infiltrate your defenses. But with a strategic approach to cyber defense you can hack the hacker before they strike! In this session, we'll...

OnDemand | Hacks That Bypass Multi-Factor Authentication and How to Make Your MFA Solution Phishing Resistant

Presented by Roger Grimes • August 15, 2022

The average person believes using Multi-Factor Authentication (MFA) makes them significantly less likely to be hacked. That is simply not true! Hackers can bypass 90-95% of MFA solutions much easier than you would think. Using a regular looking phishing email, they can bypass MFA just as easily as if it were a simple...

Live Webinar Today | The Craziest Cyberattacks Seen In the Wild and How You Can Avoid Them

Presented by Roger Grimes • August 12, 2022

It feels like we hear about a new devastating cyberattack in the news every day, and attack methods seem to be proliferating at an exponential rate. So, which tactics should you be aware of beyond standard “click and infect” attack vectors? Join Roger A. Grimes, KnowBe4's Data-Driven Defense Evangelist and...

OnDemand | Incredible Email Hacks You'd Never Expect and How You Can Stop Them

Presented by Roger Grimes • June 6, 2022

If you think the only way your network and devices can be compromised via email is phishing, think again! A majority of data breaches are caused by attacks on the human layer, but email hacking is much more than phishing and launching malware. From code execution and clickjacking to password theft and rogue forms,...

OnDemand | The Ransomware Hostage Rescue Checklist: Your Step-by-Step Guide to Preventing and Surviving a Ransomware Attack

Presented by Roger Grimes • April 22, 2022

Skyrocketing attack rates, double and triple extortion, increasing ransom demands… cybercriminals are inflicting pain in every way imaginable when it comes to today’s ransomware attacks. And you need to be prepared to protect your network, NOW. Find out the steps you need to take to minimize damage to your...

OnDemand | Hacking Your Organization: 7 Steps Cybercriminals Use to Take Total Control of Your Network

Presented by Roger Grimes • March 15, 2022

The scary fact is that the majority of data breaches are caused by human error. With so many technical controls in place hackers are still getting through to your end users. How are they so easily manipulated into giving the cybercriminals what they want? Well, hackers are crafty. And the best way to beat them is to...

OnDemand | Ransomware 3.0: We Thought It Was Bad and Then It Got Even Worse

Presented by Roger Grimes • February 1, 2022

We thought it was bad enough when traditional ransomware started to steal data in its second generation of evolution, now dubbed "double extortion". The third stage of ransomware is beginning to happen now and will make us wish for the good, old days of Ransomware 2.0. Attend this presentation to learn how...

OnDemand | Not All MFAs are Created Equal, Some MFAs are More Equal than Others.

Presented by Jasson Casey, PhD , Roger Grimes • January 26, 2022

With the explosion of ransomware and stampede of account takeover attacks, MFA has become the “go-to” solution, and a must-have if you want to renew your cyber insurance policy. But many MFA solutions rely on passwords and other “phishable” factors, that are easily bypassed by hackers. In this session, Roger...

On Demand: Implement DMARC the Right Way to Keep Phishing Attacks Out of Your Inbox

Presented by Roger Grimes • December 22, 2021

DMARC, SPF, and DKIM are global anti-domain-spoofing standards, which can significantly cut down on phishing attacks. Implemented correctly they allow you to monitor email traffic, quarantine suspicious emails, and reject unauthorized emails. But less than 30% of organizations are actually using them. And even fewer...

OnDemand Webinar | Bait & Switch: Decrypting The Methods Behind Advanced Social Engineering

Presented by Roger Grimes • November 24, 2021

Don't click phishy links. Everyone knows that. But are your end users prepared to quickly identify today's tricky tactics being used by bad actors? Probably not. Cybercriminals have moved beyond simple bait and switch domains. They're now employing a variety of advanced social engineering techniques to entice your...

OnDemand Webinar | Combatting Rogue URL Tricks: How You Can Quickly Identify and Investigate the Latest Phishing Attacks

Presented by Roger Grimes • November 11, 2021

OnDemand Webinar | Hacking Your Organization: With So Many Controls In Place, Why Are You Still Being Breached?

Presented by Roger Grimes • October 26, 2021

The scary fact is that human error is a contributing factor in more than 90% of breaches, and even the world’s most successful organizations have significant weaknesses in their cybersecurity defenses. With so many technical controls in place hackers are still getting through to your end users, making them your last...

Webinar | A Master Class on Cybersecurity: Roger Grimes Teaches Data-Driven Defense

Presented by Roger Grimes • September 21, 2021

Even the world’s most successful organizations have significant weaknesses in their cybersecurity defenses, which today’s determined hackers can exploit at will. There’s even a term for it: Assume Breach. But assuming you’ll be hacked isn’t an option for you. Your organization can’t afford a loss of...

Malicious Browser Notifications: The New Phishing Attack Not Blocked by Your Current Cyber Defense

Presented by Roger Grimes • June 20, 2021

Cybercriminals have added a devious weapon to their attack arsenals - malicious browser notifications. And the worst part is they’re not blocked by any current cyber defense. These innocuous looking pop ups can wreak havoc on your network while remaining completely undetected. They look more realistic than...

The Pesky Password Problem: Policies That Help You Gain the Upper Hand on the Bad Guys

Presented by Roger Grimes • January 21, 2021

What really makes a "strong" password? And why are your end-users tortured with them in the first place? How do hackers crack your passwords with ease? And what can/should you do about your authentication methods? For decades, end-users have borne the brunt of the password tyranny, a result of the IT industries'...