Civilians who assemble FPV drones on a kitchen table, drive components to the front line, or talk a combat pilot through a software problem from an office chair half a world away may have already given up their legal protection as noncombatants. Most of them have never been told. That warning comes from drone researcher Faine Greenwood and Nathaniel A. Raymond, executive director of the Humanitarian Research Lab at the Yale School of Public Health, in an analysis published Monday in Foreign Policy.

Their case is that the law of armed conflict was never rewritten for a war fought with store-bought quadcopters, and that the two reference texts a lawyer would open to decide whether a drone volunteer can lawfully be shot were both finished in 2009.

I have been covering both ends of this for years. DroneXL wrote about the volunteer workshops building drones for Ukrainian units in 2024, and in August about the Nvidia module that let a Russian attack drone pick its own aim point over Zaporizhzhia. The analysis puts those two stories in the same legal frame.

International humanitarian law shields civilians from attack unless they take a direct part in hostilities. Assembling armed drones, moving them toward the front, or coaching a combat pilot can cross into that category. Greenwood and Raymond write that many of the civilians doing this work remain unaware of the risk.

The protection is not lost permanently. Under the International Committee of the Red Cross guidance most militaries and lawyers work from, a civilian who directly participates can be attacked as if a combatant for as long as that participation lasts, then regains protection. Treaty law never defined what counts as direct participation. The ICRC published its Interpretive Guidance on the question in May 2009, it binds nobody, and several of the experts who sat through the six-year drafting process disagreed publicly with the result.

That vague framework now covers the garage workshops turning out drones for Ukrainian units and the fundraisers who buy, ship and remotely support them. Nobody in Kyiv is putting down a soldering iron because a Geneva expert process left a threshold fuzzy, and the authors do not pretend otherwise. Their point, made in Foreign Policy, is that people are taking on legal exposure nobody has told them about.

UN Monitors Logged the Deadliest Month Yet for Short-Range Drone Attacks

Short-range drones killed 89 civilians and injured 588 near Ukraine’s front line in June 2026, the highest monthly total since the full-scale invasion began, according to the UN Human Rights Monitoring Mission in Ukraine. Across the three years to April 2025, the same weapon category killed 395 civilians.

Set those two numbers side by side and June 2026 alone accounts for more than a fifth of the previous three years’ death toll. The June 2025 HRMMU report behind the 395 figure found operators striking civilians who showed no sign of taking part in the fighting, in cars, on bicycles, on buses, and while delivering aid, and concluded that the targeting violated the core principles of distinction and precaution. Danielle Bell, who heads the mission, said in July that “short-range drones have transformed the environment for civilians living near the frontline.”

Kherson is where this became a named practice. Locals call it the human safari, and DroneXL has followed it from the first reports of Russian crews hunting civilians in the streets through the August video of a drone chasing a 52-year-old vegetable seller around his van, which President Volodymyr Zelensky posted on X and Ukraine’s foreign minister called a war crime.

Sudan and Colombia Show How Fast the Pattern Travels

Drone strikes killed more than 1,000 civilians in Sudan between January and May 2026, UN High Commissioner for Human Rights Volker Türk told the Human Rights Council in June. Colombia’s Defense Ministry counted 8,395 weaponized drone attacks by armed groups during 2025.

Türk’s office reported in May that drone strikes caused at least 880 civilian deaths in Sudan from January through April, over 80 percent of all conflict-related civilian deaths there, which led him to call armed drones “by far and away the leading cause of civilian deaths.” DroneXL covered the long-range strike drones that turned up in Darfur a year ago, sourced mostly from Turkey and China.

The Colombian figure needs a correction the analysis leaves out. Of those 8,395 attacks, the ministry classified 333 as effective, meaning they hit what they aimed at, and recorded 20 people killed and 297 injured for the year. That is still a 445 percent jump in effective strikes over 2024, in a country where the army itself has been strapping grenades to DJI Matrice 300 airframes. Mexico, Myanmar, Gaza and Indonesian-controlled Papua each carry a version of the same trend.

The Rulebook for Air Warfare Was Written in 2009

The most recent expert restatement of the law governing air and missile warfare, the HPCR Manual produced at Harvard, was adopted in Bern in May 2009. The ICRC guidance on when a civilian forfeits protection carries the same year. Neither document contemplated a hobby quadcopter with a grenade taped underneath.

Greenwood and Raymond want the ICRC to issue an updated Commentary to the Geneva Conventions applying the law to modern drone warfare, backed by public education for civilians in conflict zones. They also want a General Assembly high-level meeting on drone attacks against civilians, France pressing the same case through its G-7 presidency, a UN reporting mechanism and special rapporteur, and an international center of expertise to track tactics and train local analysts. Raymond discloses that he has begun building such a database himself.

The General Assembly’s high-level week opens on September 22. The UN’s published schedule of high-level meetings for that week covers the right to development, climate action, sea-level rise, pandemic preparedness and nuclear disarmament. Drone attacks on civilians are not on it, and no member state has asked for a slot.

Most Drone Attacks on Civilians Are Still Flown by Hand

Automation is arriving. A Russian Molniya drone that killed three civilians at a Zaporizhzhia gas station on July 6 carried an Nvidia Jetson Orin module and selected its own aim point. Greenwood and Raymond argue that fixating on that development aims civilian protection work at the wrong problem.

DroneXL’s reporting on that strike carried detail the analysis has no room for. Ukrainian investigators read the targeting code straight off the unencrypted module, including the classifier that told the aircraft to go for propane tanks. The Molniya was the fourth Russian weapon family tied to the same Nvidia board.

It also remains an outlier. The overwhelming majority of targeted drone attacks on civilians are flown by hand, by “humans who are knowingly choosing to kill and stalk civilian targets,” as the authors put it. A ban on autonomous targeting, however well drafted, would not have stopped the drone that hunted a vegetable seller around his van in Kherson last month. A person watched him through a camera and pressed the button.

Sources: Foreign Policy, UN Human Rights Monitoring Mission in Ukraine, OHCHR, Al Jazeera

DroneXL’s Take

The legal argument is right and the enforcement problem underneath it is the one that counts. A special rapporteur documents; it does not deter. Russia hunted Kherson pensioners for two years while the UN published monthly casualty tables about it, and the strikes went up anyway.

What a documentation mechanism buys is evidence that survives contact with a courtroom years later. Worth building. Nobody should confuse it with protection.

My worry sits somewhere else, and this industry keeps ducking it. Numbers like Colombia’s 8,395 and Sudan’s 1,000 do not stay inside policy papers. They become arguments for restricting consumer drones everywhere, including where nobody is attacking anybody. The uncomfortable part is that the argument rests on something real: the weapon in Kherson and Catatumbo is a modified consumer airframe, sometimes a DJI one. It still fails on results. Colombia restricted drone imports in January 2026 to choke off guerrilla attack drones, and ACLED has already logged more weaponized drone events there in 2026 than in all of 2025.

The part our readers can act on is the education point, the least dramatic thing in the analysis. If you build airframes for a Ukrainian unit or write targeting software for one from a desk in Ohio, you are potentially a direct participant in hostilities under a framework drafted in 2009 by people who had never seen an FPV drone. That does not make the work wrong. It makes knowing the exposure part of doing it responsibly, and the people carrying the risk are the last ones being told.

Watch the General Assembly’s high-level week, September 22 to 28. The authors want a headline meeting on drone attacks against civilians, the provisional agenda has no such slot, and a week of speeches will show whether any government spends capital on this or whether it stays a subject experts write about and states walk past.

DroneXL uses automated tools to support research and source retrieval. All reporting and editorial perspectives are by Haye Kesteloo. Read our editorial standards.