In a policy memo issued quietly in late May, the Department of Defense prohibited the U.S Marine Corps from continuing to purchase and use commercial off-the-shelf drones, known at COTS, after cybersecurity vulnerabilities were exposed.