From phishing to zero-trust architecture, these are the core ideas that help anyone protect their data, recognize threats, and make smarter decisions online