This study aims to identify the cybersecurity awareness of university students from Bosnia and Herzegovina, Serbia, and Montenegro in the following aspects: a) Malware, b) Password usage, c) Phishing, d) Social engineering, and e) Online scams. A quantitative-qualitative research approach was used. Data for the quantitative section were collected using the Cyber Security Behaviour Instrument questionnaire (Muniandy et al., 2017). In the qualitative section, five semi-structured interviews were conducted with students about their behaviour and protection on the internet. Research has shown that respondents apply some good, but still also some weak or dangerous cybersecurity practices in above mentioned aspects. That confirms that the human element remains a critical vulnerability for individuals, businesses, and societies facing rapidly evolving online threats, and that we urgently need the improvement of personal cyber hygiene. The findings highlight strengths and weaknesses in respondents’ knowledge and behaviours related to cybersecurity, underscoring the need for continuous education and awareness-raising to improve internet security practices.