Holiday staffing gaps give attackers time to move quietly through networks. The pattern shows why year end security coverage matters more than most teams expect.