73,000+ Airflow, Nexus, and SonarQube Instances Found Exposed in Internet Scan

·3 views

An internet-wide scan conducted on 26 September 2026 via ZoomEye identified 73,105 Apache Airflow instances, 33,837 Nexus Repository instances, and 11,673 SonarQube instances with recognisable application fingerprints. The matches are based on product-level banner identification rather than simple port detection, making the figures more specific but also potentially undercounting actual deployments. Airflow's high count is notable because unauthenticated access could expose database credentials and allow attackers to trigger workflow runs on production systems. Nexus Repository, which stores build outputs and software dependencies, is considered especially consequential to expose as its contents are actively installed by other systems. Security researchers recommend running the same queries against organisation-controlled IP ranges to identify and verify any exposed instances internally.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Why AI Agent Fleets Need a Kubernetes-Style Control Plane to Stay Safe

A developer building a multi-agent system found that a Kubernetes-inspired control plane was essential for managing AI agents safely in production environments. Through a series of deliberate stress tests, the system successfully blocked uncertified agents, detected swapped model identities, and killed a runaway cost-burning agent mid-run at its budget ceiling. A key insight emerged from one scenario where an agent had not been modified at all, yet quietly degraded in performance — a drift that only continuous benchmarking caught, not any rule-based gate. Emerging tools like kagent and agent-sandbox bring Kubernetes-native primitives such as CRDs, RBAC, and workload isolation to AI agents, but the author argues these address placement and isolation without enforcing ownership or proven capability. The core thesis is that admission control — deciding what is allowed to run and why — matters more than orchestration alone, and that the most dangerous agents are those that drift unnoticed rather than those that are visibly altered.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Blog Series Explores How Transistors and Logic Gates Form the Basis of Computing

A developer has published the third post in a nine-part series titled 'Computers' on the DEV Community platform. The article focuses on digital logic, covering how transistors function as switches and how Boolean algebra underpins logical gate operations. It also explains truth tables and how more complex components such as adders, multiplexers, and memory elements are built from these foundations. The piece aims to illustrate the conceptual bridge between physical electronics and computational systems.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

New 'undetermined' Library Reports When a Constant Cannot Be Reliably Measured

A developer has released an open-source library called 'undetermined', available for both Python and JavaScript, that fits curves to program measurements but explicitly refuses to return a result when the data is insufficient. Unlike conventional curve-fitting tools, it outputs an error bar alongside each result and maintains a labeled list of observables it could not confidently determine, along with the reason for each refusal. The library requires a plateau across at least three consecutive input-size rungs within two combined standard errors before declaring a constant settled. It also guards against broken adapters, non-informative observables, and ambiguous choices between competing observables by raising errors rather than silently returning misleading values. A recent 0.2.0 release fixed a bug where zero-scatter observables — those returning the same value every time — were incorrectly flagged as undetermined due to a division-by-zero in the standard error calculation.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Meta FAIR's AIRA Agent Wins Kaggle Gold Medal After Training in Custom AI Dojo

Meta's Fundamental AI Research (FAIR) team developed AIRA, an AI agent system that progressed from a purpose-built training environment called AIRA-dojo to winning a gold medal in a real Kaggle competition with roughly 4,000 participating teams. The research, detailed in a multi-part series published in September 2026, showed that simply moving an existing agent called AIDE into the improved dojo environment — without modifying the agent itself — raised its MLE-bench lite medal rate from 35.2% to 45.9%. Further gains came from redesigning the agent's core operators and search strategies, with the best configuration achieving a then-record 47.7% medal rate on the 22-problem lite benchmark using the o3 model. A key finding was that environmental quality — such as cleaner dependency management and reduced overhead — contributed as much to performance as model upgrades. The work suggests AI development teams should audit their agent's operating environment before investing in more powerful underlying models.

0 comments Read more at DEV Community