6 cybersecurity mistakes people make — and what to do instead