If you discovered a critical vulnerability in a live system at Banco Santander, what steps would you take to address it?