CubePilot drone software dev hit by DNS hijacking to intercept traffic

CubePilot, an Australian drone software developer, suffered a DNS hijacking attack on July 24, 2026, which allowed attackers to redirect traffic from its domain to their own infrastructure. The attackers obtained valid TLS certificates for all subdomains, enabling them to intercept credentials and potentially deliver malware without triggering HTTPS warnings. As a result, CubePilot took multiple services offline, including its forum, documentation portal, and ERP system, while investigating the incident and validating the integrity of its firmware.

AI-extracted · verify before operational use