The latest update from CISA states that Chinese-manufactured Unmanned Aircraft Systems (UAS), commonly known as drones, present a substantial risk to critical infrastructure and national security in the United States. The People’s Republic of China (PRC) has implemented laws that grant the government extensive legal authority to access and control data held by Chinese firms. This poses a heightened risk of data theft and network compromises through vulnerabilities in UAS.
To address this threat, the Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) are advising U.S. critical infrastructure owners and operators to exercise caution when procuring Chinese-manufactured UAS. The agencies recommend prioritizing UAS that adhere to secure-by-design principles, with a particular emphasis on those produced by U.S. companies.
CISA and the FBI stress the importance of following secure-by-design principles to reduce the risk to networks and sensitive information. They further guide cybersecurity measures and best practices for organizations procuring and operating UAS. By adopting these recommendations, U.S. entities can enhance their cybersecurity posture and mitigate potential threats associated with the use of Chinese-manufactured drones.
Read the full CISA report here.