DEFENSESTORM BLOG

Holiday Cybersecurity Tips: Staying Safe from Thanksgiving through Christmas

Wednesday, November 19th, 2025

VIEW ALL INSIGHTS

Cyber security risk management solutions from DefenseStorm.

As you prepare for the holidays, it’s important to remember that cybercriminals are preparing too! Now is the perfect time to strengthen your cybersecurity! Here are some important tips to keep your data and devices safe while you enjoy the holidays!

With Thanksgiving just around the corner, many of us are preparing to travel, spend time with family, and take a well-earned break. As the holiday season kicks off, from Thanksgiving to Black Friday to Christmas, it’s a great time to make sure your cybersecurity habits are ready too. Here are some important tips to keep your data and devices safe while you enjoy the holidays!

Shut down and unplug your laptop.
Before heading out for the long weekend, shut down and unplug your work or personal laptop. It helps protect against power surges, reduces the risk of cyberattacks, and keeps your device safe from any unpatched vulnerabilities.

If you leave devices on, update everything first.
Planning to leave your computer running for remote access or downloads? Make sure your system, software, and security tools are all fully updated, and log out of any sensitive accounts. Automatic updates can help close security gaps while you’re away.

Secure new gadgets and smart home devices.
With Black Friday and Cyber Monday deals, many people will be picking up smart TVs, speakers, and other connected devices. Always change default passwords, enable multifactor authentication if available, and review privacy settings to control how your data is used.

Watch out for seasonal phishing and scams.
Expect an increase in fake “Black Friday deal” emails, “package delivery” texts, and charity scams around Thanksgiving and Christmas. Don’t click unexpected links or share personal details — when in doubt, verify directly with the sender or retailer.

Think before you post on social media.
Cybercriminals often use holiday posts to learn when you’re traveling or what gifts you’ve bought. Avoid sharing real-time travel updates or expensive new purchases until after you’re home.

Shop smart and stay secure.
Stick to trusted retailers and avoid “too good to be true” deals from unfamiliar sites. Always check that the URL starts with https:// and consider typing it directly into your browser instead of clicking ads or links.

Use a credit card instead of a debit card.
As CISA reminds us, “There are laws to limit your liability for fraudulent credit card charges, but you may not have the same level of protection for your debit cards.” Using a credit card keeps your bank account safer from unauthorized transactions.

Monitor your accounts.
Keep an eye on your bank and credit card statements during and after the holidays. Set up alerts for suspicious or large transactions to catch potential fraud early.

Be careful with public Wi-Fi.
Traveling this Thanksgiving? Avoid logging into sensitive accounts on public networks, and consider using a trusted VPN if you need to connect while away.

Stay alert after the holidays.
Scams don’t stop once the decorations come down, fake return/refund notices and package tracking messages are common well into the new year.

The holidays are a time for gratitude, connection, and a well-deserved break, but they’re also prime time for cybercriminals hoping to cash in on the season’s distractions.

Continue to use strong passwords, stay cautious with links and purchases, and look out for one another both online and off. From all of us at DefenseStorm, have a safe, secure, and Happy Thanksgiving next week and a great start to the holiday season ahead!

 

James Bruhl

James Bruhl

Director of Cyber Threat Intelligence

James Bruhl is the Director of Cyber Threat Intelligence for DefenseStorm. He joined the company with 15 years of experience as a law enforcement officer, bringing extensive experience in crime prevention, evidence collection, investigative techniques, and crisis management. Driven by a passion for technological advancements and the ever-evolving landscape of digital threats, he transitioned to the field of digital forensics, incident response, and cybersecurity. In his role, he honed his skills in analyzing digital evidence, identifying cyber threats, and implementing robust security measures specializing in forensic examinations on various devices to uncover critical information and support investigations. James began at DefenseStorm as a security engineer in 2020 and developed DefenseStorm’s EDR Service. He was then appointed as Director of Cyber Threat Intelligence in 2022 and is responsible for nearly all facets of the EDR service. During his cyber career, James has been instrumental in proactively detecting and responding to cyber incidents and plays a vital role in incident response teams, coordination efforts to mitigate the impact of breaches, vulnerability identification, and strategy implementation to prevent future attacks. He continues to share his expertise by conducting training sessions, participating in conferences, and writing articles on topics related to digital forensics, incident response, and cybersecurity. James holds a bachelor’s in criminal justice from the University of North Georgia and a GCFE certification.