How attacks usually start

Most security incidents start with a person, not a computer: an email link clicked, a password reused, or a file opened without checking.

Attackers count on people being busy and trusting. A few habits make you a much harder target.