Cybersecurity Policy Report, GAO Finds Gaps in FAA’s Cyber Defenses for Airspace Communications, (Sep 22, 2026)
Organizations Mentioned:Federal Aviation Administration | Government Accountability Office
The communications systems used by aircraft are vulnerable to cyber threats, and the Federal Aviation Administration’s defenses are inadequate, according to the Government Accountability Office.
The national airspace system (NAS) “relies on a complex network of aviation systems and communications links to support the safe and efficient movement of aircraft,” GAO noted in a report released yesterday.
“As these systems become increasingly interconnected, cybersecurity risks have the potential to affect critical aviation communications and operations. Although FAA has not experienced a successful cyberattack resulting in safety impacts, evolving threats increase the importance of protecting these systems,” it said.
“FAA has identified spectrum-related threats to the NAS and international flight routes, including spectrum interference, spoofing, and jamming. However, gaps in risk assessments, mitigation planning, security documentation, and real-time monitoring capabilities limit FAA’s ability to fully understand, detect, and respond to these threats,” it said.
“As a result, disruptions to aviation communications could go undetected or unaddressed, increasing the risk of operational delays, degraded situational awareness, and impacts to air traffic operations,” GAO added.
The report advises the FAA to “develop a formal risk assessment report that addresses, analyzes, and documents specific risks to the seven of eight identified NAS systems arising from but not limited to threats such as spectrum attacks, spoofing, and jamming.”
In addition, the FAA “should implement capabilities to continuously monitor threats such as interference, spoofing, and jamming to aviation communications links within the National Airspace System,” GAO advised.
The Department of Transportation, on behalf of the FAA, said it would implement the nine recommendations offered by GAO, which conducted the study of aviation cyber threats pursuant to the fiscal year 2025 National Defense Authorization Act.
The report was sent to the chairman and ranking members of the House and Senate committees on Intelligence and Armed Services; the Senate Commerce, Science, and Transportation Committee; and the House Transportation and Infrastructure Committee.
News: FederalLegislation DataSecurity