Critical security credentials are inadvertently being exposed on thousands of websites – including those run by some banks ...