Most people think they’ll be safe from most cyber security threats as long as they pay attention and follow certain rules, like knowing how to spot phishing messages and not downloading unusual apps.