Hackers, like Santa, are watching us this holiday season. Here are two phone vulnerabilities and how to address them.