Reinforcing the weakest link in cyber security: securing systems and software against attacks targeting unwary users