12 Million exposed .env files reveal widespread security failures

Multiple high‑impact security incidents and vulnerability disclosures were reported: Mysterium VPN discovered ~12 million publicly exposed .env files leaking credentials and secrets; European DIY platform ManoMano suffered a third‑party‑provider breach affecting ~38 million customers; ShinyHunters leaked 12.4M CarGurus accounts. Multiple critical vulnerabilities and active exploitations were disclosed or patched — Trend Micro Apex One received fixes for two critical RCE flaws; Cisco SD‑WAN had critical issues added to CISA’s KEV and a zero‑day (CVE‑2026‑20127, CVSS 10.0) has been exploited in‑