Attackers are planning around your holidays. The question is whether you’ve done the same.