A consumer research group found that these toys slated for the holiday shopping season are vulnerable to hackers.