What would you do if you discovered a misconfigured firewall rule exposing an internal service to the internet?
