FAA ground stop highlights vulnerabilities in aircraft communication systems
A temporary halt to flights at several northeastern U.S. airports followed a fiber-optic cut, coinciding with a GAO report that warned the FAA's communication systems are vulnerable to spoofing and jamming.
Flights at Newark Liberty, Philadelphia International and Teterboro airports were suspended on Monday after a radio equipment issue disrupted the Philadelphia terminal radar approach control. John F. Kennedy International Airport also reported delays due to an FAA equipment outage. The Transportation Secretary said the problem stemmed from an Amtrak construction crew accidentally severing a fiber line that provides internet service, causing a telecommunications failure.
The incident occurred as the Government Accountability Office released a report finding that the FAA has not completed risk assessments or updated security documentation for threats such as spoofing, jamming and other radio-spectrum attacks. The GAO noted the agency lacks a real-time detection system for such threats, limiting its ability to respond until incidents are reported.
"The FAA's failure to require the aviation industry to use secure communications is a major threat to US national security, to our economy and the safety of the flying public," said Senator Ron Wyden, who chairs the Senate intelligence committee.
The report warned that hackers could transmit fraudulent messages, including false flight-clearance cancellations, potentially causing delays, airspace disruption or safety hazards. Two messaging systems used by controllers predate modern cybersecurity standards and do not employ encryption.
The GAO issued nine recommendations, including formal risk assessments for seven of eight reviewed systems, continuous monitoring for interference, and guidance on information sharing. The Department of Transportation, responding on behalf of the FAA, said it agreed with all recommendations.
The FAA oversees more than 44,000 daily flights and about three million passengers, according to the GAO. Recent outages at Newark and a prior incident in April 2025 that briefly disabled controllers' screens underscore ongoing reliability concerns.
Internationally, the GAO cited instances of jamming and spoofing reported by Estonia and Finland, which have accused Russia of interfering with satellite navigation in their airspace.