VulnerabilityBleeping Computer
6.0 — HIGH
CubePilot drone software dev hit by DNS hijacking to intercept traffic
CubePilot, an Australian firm that designs flight controllers for drones (UAVs), announced a severe operational disruption caused by a DNS hijacking attack. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
CubePilot, an Australian drone software developer, was targeted by a DNS hijacking attack allowing the attacker to intercept traffic intended for internal systems and obtain valid TLS certificates for all cubepilot.org subdomains.
⚙️Technical Details
💥Impact Assessment
Severity: high
Who Is at Risk
CubePilot's clients, including OEM services, community forum, and documentation portal
🛡️Recommended Actions
1Clients should not take any action on payment requests claiming to be from CubePilot until confirmed over the phone with their usual contact.
2Users should change their passwords for all affected services immediately.
3Users should not flash firmware images downloaded on July 24-25 until checks to confirm their safety are completed.
📦Affected Products
CubePilot's ERP portalCubePilot's community forumCubePilot's documentation portal
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.