<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0"><channel><title>Peakhour.IO - Email Security</title><link>https://www.peakhour.io/</link><description></description><lastBuildDate>Thu, 22 Oct 2026 00:00:00 +1100</lastBuildDate><item><title>From an exposed .env file to an SMTP login in 22 seconds</title><link>https://www.peakhour.io/blog/env-file-smtp-credential-reuse/</link><description>&lt;p&gt;One source fetched three exposed .env decoys, then presented each exact password to SMTP within 22 seconds. Here is the evidence and what to protect.&lt;/p&gt;</description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">AC</dc:creator><pubDate>Thu, 22 Oct 2026 00:00:00 +1100</pubDate><guid isPermaLink="false">tag:www.peakhour.io,2026-10-22:/blog/env-file-smtp-credential-reuse/</guid><category>Security</category><category>Credential Exposure</category><category>Email Security</category><category>Threat Detection</category><category>WAF</category></item></channel></rss>