CISA, FBI Target National Security Risks of Chinese Drones

U.S. critical infrastructure operators should deploy American-built drones that follow secure-by-design principles and understand that Chinese drones carry significant national security risks, the Cybersecurity and Infrastructure Security Agency and the FBI said Wednesday in new guidance. “Cybersecurity Guidance: Chinese-Manufactured Unmanned Aircraft Systems” seeks to raise awareness about “threats posed by Chinese-manufactured UAS and to provide critical infrastructure and state, local, tribal, and territorial (SLTT) partners with recommended cybersecurity safeguards.” The agencies said Chinese laws provides its government with "expanded legal grounds for accessing and controlling data held by firms in China. The use of Chinese-manufactured UAS in critical infrastructure operations risks exposing sensitive information” to Chinese authorities. David Mussington, CISA executive assistant director-infrastructure security, noted critical infrastructure sectors like communications, energy and chemicals are “increasingly relying on UAS for various missions that ultimately reduce operating costs and improve staff safety.” Mussington cited the threat of “China’s aggressive cyber operations to steal intellectual property and sensitive data from organizations.”