CubePilot takes drone services offline after attacker hijacks DNS and TLS
CEO Philip Rowse warned users to change reused passwords and avoid firmware downloaded July 24th-25th while CubePilot verifies published images.
By Ryan Merket · Published
Primary source: CubePilot
Why it matters
CubePilot's breach reached the trust layer around drone hardware: valid certificates, customer credentials and firmware distribution. Its checksum review will determine whether the incident remained an account compromise or touched aircraft software.
CubePilot, led by CEO Philip Rowse, took its firmware, documentation, community forum and OEM services offline after an attacker seized control of its domain-name settings and obtained valid security certificates for every cubepilot.org subdomain.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.