U.K. steps up defense supply-chain checks after naval drones signal China

The UK Ministry of Defense is tightening its grip on the defense supply chain following a discovery that cameras on Royal Navy surveillance drones transmitted signals to a Chinese internet address, according to Bloomberg. The issue was identified in K3 Scout unmanned vessels produced by Kraken Technology Group during a routine cyber vulnerability assessment.

Officials are investigating whether other defense contractors may have sourced cameras from the same supplier. The Ministry of Defense has not initiated a comprehensive industry-wide audit. The cameras in question contained components made in China and transmitted "heartbeat communications," which could disclose the drones' whereabouts and operational status.

However, government data, systems, or information were not accessed, compromised, or transmitted externally. Kraken Technology Group stated that some third-party cameras, which adhere to the US National Defense Authorization Act, contain components sourced outside the UK but no sensitive information was shared, and potential vulnerabilities were identified and rectified.

The discovery has heightened concerns about covert security risks within intricate defense supply chains, especially when components are procured from countries perceived as adversaries. The Ministry of Defense emphasized that its testing and assurance procedures aim to identify vulnerabilities early on. They are also reviewing potential adversarial exposure across their supplier base and formulating measures to mitigate these risks.

Officials stated that the department remains vigilant and reviewing its processes as threats evolve. Some expressed apprehension that the issue may have been uncovered through serendipity rather than systematic monitoring. The Ministry of Defense has underlined that suppliers must adhere to contractual security obligations and internationally recognized security standards.