“A few weeks ago an ordinary security assessment turned into an incident response whirlwind.”
A routine GDPR review found malware on the client’s load balancers. It read decrypted HTTPS traffic inside a Go app and shipped the personal data out. The kernel itself had been patched in memory. Your TLS ends somewhere, and that box is now the most valuable target on the network.