Users are still not taking basic steps to protect their computers and themselves from cyber attack.