The Federal Aviation Administration’s ability to protect the nation’s air‑traffic system from emerging electromagnetic spectrum attacks is under scrutiny after a Government Accountability Office (GAO) report highlighted critical gaps in the agency’s cybersecurity program. The report, released Monday, found the FAA does not maintain system‑specific risk assessments, real‑time monitoring, or documented mitigation plans for threats like GPS spoofing, radio jamming, and unencrypted digital messaging.
Key findings from the GAO review
According to the GAO, the FAA maintains only a general spectrum risk assessment that addresses risks across all systems, leaving seven of eight spectrum‑dependent National Airspace System (NAS) networks without detailed, system‑specific evaluations. Without those assessments, the agency may lack the reliable information needed to make risk‑based cybersecurity decisions for critical NAS components.
The report also noted that the FAA’s CPDLC (Controller‑Pilot Data Link Communications) system—used for digital messaging between pilots and air‑traffic controllers—was built without encryption or authentication. This design flaw could allow a malicious actor with the right equipment to intercept messages or inject false instructions that appear to come from air‑traffic control.
In addition, the GAO criticized the FAA’s current collaboration framework with other federal agencies and industry stakeholders, saying it lacks clear procedures for information sharing, reporting, and coordination with non‑federal partners. The agency’s fragmented approach could lead to inefficient responses to incidents.
Potential impact on travelers
Disruption of the electromagnetic spectrum could degrade situational awareness, erode air‑traffic control effectiveness, and cause significant operational delays. The report warned that such attacks could result in flight cancellations, extensive delays, and reduced safety for the more than 44,000 daily flights and three million airline passengers the FAA oversees.
Recent events underscore the vulnerability. More than 1,000 flights were canceled and over 6,000 delayed on a Monday after a severed fiber‑optic line crippled a key air‑traffic control facility in Philadelphia. Transportation Secretary Sean Duffy later confirmed the issue was resolved and that Northeast airports were returning to normal operations.
Administration response and next steps
The Department of Transportation, which oversees the FAA, has pledged to strengthen the agency’s risk‑assessment process and expand outreach across the aviation ecosystem. Secretary Sean Duffy emphasized that the Trump administration is committed to “enhancing the security of our nation’s skies by ensuring the FAA adopts a robust, risk‑based cybersecurity framework and works closely with industry partners to detect and mitigate spectrum‑related threats.”
According to the GAO, the FAA and its partners are already collaborating on detection and mitigation procedures for jamming and spoofing, including making these tools available to pilots. Full implementation of leading collaboration practices could help the FAA avoid fragmented, inefficient responses to future incidents.
Rising interference incidents
Incidents of satellite navigation signal loss—including interference, space weather, and onboard issues—have risen sharply, climbing from 28.1 to 60.1 per 1,000 aircraft since 2021, based on a 2025 International Air Transport Association report cited by the GAO.
By addressing the identified gaps—particularly the need for system‑specific risk assessments, encryption of critical communications, and a clear inter‑agency information‑sharing protocol—the FAA can better protect the nation’s air‑travel infrastructure from sophisticated spectrum‑based attacks.
What this means for the traveling public
While the GAO’s findings highlight serious vulnerabilities, the administration’s swift acknowledgment and commitment to reform signal a proactive stance. Travelers can expect continued efforts to safeguard flight operations, reduce the likelihood of large‑scale delays, and maintain the safety record that makes U.S. aviation a global benchmark.
Original reporting: WMAL (Washington DC) — read the source article.
