The best security posture is to assume you’ve been compromised. Because you probably have.