NoScript will block some of these kinds of things. Some other things you can do is block 3rd party cookies and set all cookies to act as session cookies. Session cookies aren't stored permanently. Another thing people don't realize is that Flash uses cookies that are different than regular cookies. Google "Flash Cookie Settings" and you will get instructions on managing them.
The best thing anyone can do is pay attention online. The vast majority of phishing and identity theft is low tech and user error. For example, if you are entering information on chase.com make sure that that is what is in the browser's address bar. Anything asking for a username and password really should be on a secured page (https: instead of http

. The DIS doesn't have that option but they aren't asking for financial info. Just make sure the password you use here isn't the same one you use on other sites.
Most viruses, malware, and identity theft can be thwarted by changing some security settings and being vigilent. If you get an email from a financial institution don't follow links, manually go to the page in a browser. If you get an email to call BoA at a number don't use it, get the number off the back of you card.
If anyone wants to really know about online security checkout the
Security Now podcast, it is part of the TWiT network. It requires above average computer knowledge but doesn't require a Computer Science degree to follow.