Cyber insecurity often feels like a horror story, and the idea of cyber security an out-of-reach myth. The last few years have seen breaches that are bigger, and of a higher profile, than ever before. When we trace these back to their cause, we often find that attackers took advantage of human behaviour, via social engineering, poor password management, gaps in physical security or malicious insiders. Combining sociological and psychological research with stories from mythology and classic horror fiction, this talk highlights what we need to understand about people to make cyber security less of a monster.