Start here
Security people use three words carefully: threat, vulnerability and risk. Mix them up, and you end up worrying about the wrong things.
The easiest way to learn them is with something you already understand: a house, a burglar and an open window.