'Tis the season for retail security threats