How ‘silent probing’ can make your security playbook a liability