CISA, FBI Release Cybersecurity Guidance on Chinese-Made Drones

Defense News ,U.S:- The US Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) have issued a warning about the potential risks associated with using drones developed in China. The advisory aims to inform organizations about the threats posed by Chinese-made aerial drones.

The concern stems from the laws in the People's Republic of China (PRC), which grant the government certain access and control over data stored by companies within the country. According to CISA, using unmanned aerial systems (UAS) from Beijing in the US could expose critical data to Chinese authorities due to these legal provisions.

Using Chinese-manufactured drones without proper cybersecurity measures could also lead to vulnerabilities in US-based networks and the exploitation of sensitive information, warns the agency.

David Mussington from CISA Infrastructure Security highlighted the growing reliance on drones in critical infrastructure sectors such as energy, chemicals, and communications. While drones offer cost savings and improve staff safety, the use of Chinese-made UAS raises concerns about jeopardizing sensitive information, potentially affecting national security, economic security, and public health and safety.

To address these risks, CISA recommends critical infrastructure operators to opt for drones that are "secure by design" and manufactured by US industry partners. The advisory emphasizes the need for organizations to be vigilant about China's aggressive cyber operations, which involve stealing intellectual property and sensitive data. CISA encourages all entities using and procuring drones to review the provided guidance and take necessary actions to mitigate potential risks. The collaboration between CISA and the FBI aims to ensure the security and resilience of critical infrastructure in the face of evolving cybersecurity threats.