Top stories.
- US bans sale of foreign-made drones, citing security concerns.
- Ransomware hits Romania's national water authority.
- University of Phoenix data breach affects 3.5 million individuals.
US bans sale of foreign-made drones, citing security concerns.
The US Federal Communications Commission (FCC) yesterday banned the sale of all new foreign-made drones within the United States, citing "unacceptable risks to the national security of the United States and to the safety and security of U.S. persons." Congress passed a bill last year calling for a ban on drones made by Chinese companies, but the FCC concluded that all drones produced abroad posed unacceptable security risks. The ruling primarily affects the Chinese drone manufacturer DJI, which represents more than ninety percent of the world's consumer drone market.
While security concerns surrounding China-made drones have been circling for years, the New York Times notes that drone operators are not pleased with the ruling; many small business owners in the US have built their companies using DJI equipment. The FCC refrained from banning existing models to avoid disrupting emergency and law enforcement operations, which use DJI drones for rescue operations or for tracking suspects.
Ransomware hits Romania's national water authority.
Romania's national water authority, Romanian Waters, sustained a ransomware attack over the weekend that impacted around 1,000 computer systems at ten of its eleven regional offices, BleepingComputer reports. The incident affected "servers running geographic information systems, databases, email, and web services," but the organization says OT operations and essential services were not disrupted.
The Romanian Intelligence Service's National Cyberint Center, which is investigating the incident, said the attackers used Windows's legitimate BitLocker security feature to encrypt files.
University of Phoenix data breach affects 3.5 million individuals.
The University of Phoenix has shared details regarding a data breach stemming from a recent zero-day campaign targeting Oracle E-Business Suite (EBS) instances, SecurityWeek reports. The school disclosed in a filing with the Maine Attorney General's Office that the incident affected nearly 3.5 million people, and involved "names, dates of birth, Social Security numbers, and bank account and routing numbers (without means to access)." The breach began in August 2025 and was discovered in November.
The university is offering free identity theft protection for affected individuals.
