Misconfigurations & Fixes We Found an Exposed .env File with API Keys and Database Passwords—Here’s How January 2, 2026