Worst practices in cybersecurity: Three things every news media executive needs to know