Abstract

This article examines the 30 September 2026 incident involving flydubai Flight FZ1073, which was diverted to Tabuk, Saudi Arabia, after the co-pilot attacked the captain in the cockpit. The UAE Attorney-General subsequently stated that investigators believed the co-pilot had planned to seize the aircraft and crash it into the passenger terminal at Ben Gurion Airport, describing the alleged plot as a terrorist act inspired by the 11 September 2001 attacks. As the investigation continues, these claims must be attributed to the authorities rather than treated as a final judicial determination. Using a qualitative comparative case-study approach, the article places FZ1073 alongside the Dawson’s Field hijackings, Entebbe, the 1980s hijacking campaigns, Indian Airlines IC-814 and 9/11. The comparison identifies a shift from hostage-taking and political coercion towards the possible use of an aircraft as a weapon, while recognising that historical cases differ in ideology, organisation and purpose. The article argues that FZ1073 highlights the limits of security models focused mainly on preventing unauthorised access: a threat may originate within a trusted operational environment. It recommends risk-based personnel security, lawful information-sharing, recurrent threat assessment, crew resilience, independent safety review and international coordination. The case does not justify indiscriminate surveillance or collective attribution to religious communities. Its wider significance lies in the need for aviation security to integrate prevention, detection, response and recovery while preserving due process and evidentiary discipline.

Keywords

aviation security; insider threat; aviation terrorism; 9/11; flydubai FZ1073; personnel security; critical infrastructure

1. Introduction

Civil aviation is both critical infrastructure and a system built on trust. Airlines depend on qualified personnel exercising access to aircraft, flight controls, communications and operational procedures. Security architecture has traditionally concentrated on preventing hostile outsiders from entering airports or aircraft. The incident involving flydubai Flight FZ1073 on 30 September 2026 demonstrates why the risks associated with authorised access also require sustained attention.

FZ1073 was operating from Dubai to Tel Aviv when a violent confrontation occurred in the cockpit. The aircraft descended rapidly and diverted to Tabuk, Saudi Arabia, where it landed safely after crew members, passengers and additional qualified pilots intervened. The UAE Attorney-General later stated that the investigation had identified an alleged premeditated plan to seize control of the aircraft and crash it into the passenger terminal at Ben Gurion Airport. Authorities said the suspect had confessed to acting alone, while also confirming that checks for possible accomplices and other connections continued (Emirates News Agency [WAM], 2026a, 2026b).

These developments make the comparison with 11 September 2001 more than a speculative analogy, but they do not make the events equivalent. The comparison concerns the alleged objective of turning a passenger aircraft into a mass-casualty weapon. The operational circumstances, scale, organisational structure and outcome remain substantially different.

The research question is: what does FZ1073 reveal about the evolution of aviation terrorism and the limitations of security systems that rely heavily on perimeter controls and personnel clearance? The article argues that the incident reinforces the need to treat aviation security as a continuously adaptive system, combining personnel security, intelligence assessment, cockpit and crew resilience, emergency response and international cooperation.

2. Methodology and literature

This article uses qualitative historical comparison and documentary analysis. It examines selected cases that illustrate distinct patterns in aviation-related political violence: the coordinated Dawson’s Field hijackings (1970), Air France Flight 139 and Entebbe (1976), selected hijackings of the 1980s, Indian Airlines IC-814 (1999), the 11 September attacks (2001), and FZ1073 (2026). Cases were selected for their relevance to four analytical dimensions: the role assigned to the aircraft, the treatment of passengers, the organisation and geography of the perpetrators, and the security lessons that followed.

The source base combines official statements and institutional material from the UAE, the International Civil Aviation Organization (ICAO), the 9/11 Commission, the United States government and Indian parliamentary records with contemporaneous reporting from Reuters and other established news organisations. Official statements are treated as evidence of what authorities have announced, not automatically as independent verification of every claim. For FZ1073, the article distinguishes the UAE prosecution’s stated findings from issues that remain under investigation. The analysis does not independently adjudicate the suspect’s guilt or the completeness of the official account.

The literature on aviation security and terrorism highlights both adaptation by violent actors and the institutional consequences of major attacks. The 9/11 Commission (2004) showed how assumptions based on conventional hijacking contributed to the failure to anticipate aircraft-as-weapon attacks. ICAO’s Global Aviation Security Plan emphasises risk awareness, security culture, human factors, technology, oversight and cooperation (ICAO, 2024). Research on terrorism also cautions against treating ideological labels as sufficient explanations of individual conduct or organisational responsibility (Jackson, 2014; Nesser, 2016).

This study is a focused policy analysis, not a statistical assessment of aviation incidents. The cases are illustrative rather than a representative sample. Public information about FZ1073 remains incomplete, and no confidential operational records or direct interviews were available. Conclusions are therefore limited to the implications supported by the documentary record.

3. Historical evolution: from leverage to weaponisation

The history of aviation terrorism is not a single linear progression. Different organisations have used aircraft for different purposes, including prisoner exchanges, publicity, hostage-taking, political coercion and mass-casualty attacks. Nevertheless, selected cases help explain how security assumptions have changed.

The Dawson’s Field hijackings in September 1970 demonstrated the international leverage available through coordinated seizures of civilian aircraft. Passengers were held as bargaining assets, aircraft were diverted across borders, and one aircraft was destroyed after hostages had been removed. The episodes contributed to a broader international recognition that unlawful seizure of aircraft required coordinated legal and security responses. The Hague Convention of 1970 addressed unlawful seizure, while the Montreal Convention of 1971 addressed other unlawful acts against the safety of civil aviation (ICAO, n.d.).

Air France Flight 139 and the Entebbe crisis of June–July 1976 further illustrated how an aircraft could become the centre of an international hostage crisis. The operation involved militants associated with the Popular Front for the Liberation of Palestine and the German Revolutionary Cells. These organisations should not be retroactively categorised as Islamist simply because Palestinian militants were involved: the PFLP’s political orientation was predominantly secular and revolutionary. The analytical lesson is the aircraft’s use as a vehicle for coercion and international political pressure, not ideological continuity with later jihadist organisations.

The hijackings of the 1980s, including TWA Flight 847 and Kuwait Airways Flight 422, demonstrated how hostage crises could move across several jurisdictions and involve overlapping networks, political demands and difficult attribution questions. Intelligence assessments and public allegations linked some individuals to Hezbollah or Hezbollah-associated networks, but individual involvement, organisational responsibility and state direction are distinct propositions and should not be collapsed into one claim. These cases illustrate the importance of distinguishing contemporaneous intelligence assessments from judicially established findings.

The December 1999 hijacking of Indian Airlines IC-814 brought the problem into a South Asian context. The aircraft was diverted through several locations and ultimately held at Kandahar under Taliban control. India released three imprisoned militants—Masood Azhar, Mushtaq Zargar and Omar Sheikh—in exchange for the remaining hostages. The crisis exposed the operational difficulties of responding to a moving hostage situation across jurisdictions and highlighted the strategic consequences of negotiations under acute pressure. It also demonstrated how aviation incidents can intersect with regional militant networks and contested political environments.

The attacks of 11 September 2001 represented a decisive change in the intended end-state. Nineteen al-Qaeda operatives hijacked four passenger aircraft; three struck targets in New York and Washington, while United Airlines Flight 93 crashed in Pennsylvania after passengers resisted. The 9/11 Commission found that the attacks exploited assumptions associated with conventional hijacking, in which perpetrators were expected to preserve the aircraft and negotiate. The aircraft instead became weapons.

FZ1073 is relevant to this history because UAE authorities have stated that the alleged plan was inspired by 9/11 and intended to use the aircraft against an airport terminal. That official account establishes a stronger basis for comparison than was available in the first hours after the incident. Yet the comparison must remain bounded: FZ1073 was disrupted before the alleged objective was achieved, and the evidence available publicly does not establish an equivalent organisation, operational scale or wider network. The useful comparison is the intended use of a civilian aircraft, not a claim that every feature of the two cases was the same.

4. FZ1073 and the trusted-access problem

The early public account of FZ1073 was necessarily provisional. Flydubai confirmed an incident in the flight deck and said passengers were safe; Israeli officials described an attempted crash, while the UAE opened a formal investigation and urged the public to avoid speculation. Subsequent announcements by the UAE Attorney-General materially changed the evidentiary picture. On 3 October, the Attorney-General said investigators believed the co-pilot had attempted a terrorist act and attacked the captain with an emergency axe. On 9 October, the authorities stated that the alleged plan was to seize the aircraft and crash it into the passenger terminal at Ben Gurion Airport. They also reported that the suspect had used earlier flights to familiarise himself with the route and airport and had passed the required recruitment and security checks (WAM, 2026a, 2026b).

These are significant official findings, but the investigation was still examining possible accomplices, links, recordings and technical evidence. The suspect’s reported confession is relevant evidence, not a substitute for transparent legal process or final adjudication. The article therefore uses formulations such as “the UAE authorities stated” and “the alleged plot” when describing matters that remain under investigation.

The central security issue is not simply whether screening at an airport was adequate. A licensed pilot has legitimate access to the cockpit and to safety-critical systems because commercial aviation cannot function otherwise. This makes the threat different from an unauthorised passenger attempting to breach a cockpit door. A personnel-clearance decision made at recruitment may be accurate on the information then available and still fail to identify later changes in behaviour, intent or risk.

The reported fact that the suspect passed required checks does not by itself prove that the hiring process was negligent. Nor does it demonstrate that any vetting system can reliably identify hidden beliefs or future criminal intent. It instead raises a more difficult policy question: how can employers and regulators identify credible, behaviourally grounded risk without punishing lawful beliefs, intruding disproportionately into private life or creating a false impression that radicalisation can be predicted with certainty?

A proportionate approach should focus on relevant evidence, professional conduct, credible threats, access to sensitive systems and legally reviewable risk indicators. It should provide clear reporting channels, safeguards against malicious reporting, consistent assessment and appropriate appeal mechanisms. Personnel security is strongest when it is continuous and evidence-led, rather than based solely on a one-time check or an unstructured judgement about ideology.

5. Findings and discussion

The comparison produces four findings.

First, aviation threats adapt to the assumptions embedded in security systems. The historical shift from hostage-taking to aircraft-as-weapon attacks showed that procedures designed for one adversary objective may be inadequate against another. FZ1073 reinforces the need to assess both external intrusion and misuse of authorised access.

Second, resilience can prevent a security breach from becoming a catastrophe. In FZ1073, the captain’s actions, intervention by crew and passengers, and the presence of additional qualified pilots were reported as important to the safe landing. This does not make passenger intervention a substitute for professional procedures; it demonstrates that contingency planning and the ability to restore safe control matter alongside prevention. Investigators and safety authorities should examine the event to identify lessons without assuming that the successful outcome proves every part of the system worked as intended.

Third, attribution requires discipline. The historical cases involved different ideologies and organisational structures. Entebbe’s secular revolutionary groups, Hezbollah-linked actors in some 1980s cases, the South Asian jihadist context of IC-814 and al-Qaeda’s 9/11 operation cannot be treated as one continuous organisation or ideology. In the current case, UAE authorities have described a planned terrorist attack and reported a confession, while further investigation continues. Analysts should not infer state sponsorship, accomplices or a broader network without evidence. Nationality, religious identity and exposure to extremist content are not, by themselves, proof of responsibility.

Fourth, aviation security is inherently transnational. An aircraft may depart in one jurisdiction, encounter an emergency in another, and divert to a third. The FZ1073 response required cooperation among the airline, authorities in the UAE and Saudi Arabia, and other parties with relevant investigative or passenger interests. Differences between criminal investigation and aviation-safety investigation should be preserved: the former may seek to establish responsibility, while the latter aims to identify causes and prevent recurrence. Sharing relevant evidence can support both purposes if responsibilities and legal protections are clear.

These findings support a systems approach. Security should be assessed not only by whether mandated procedures were followed, but also by whether the overall system can prevent, detect, contain and recover from credible threats. This is consistent with ICAO’s emphasis on security culture, human factors, oversight, innovation and international cooperation (ICAO, 2024). It also avoids the unsupported conclusion that one incident alone proves a general failure across the aviation industry.

6. Policy recommendations

Governments and regulators should establish lawful, structured mechanisms for sharing credible aviation-security information between licensing bodies, airlines, airports and relevant security agencies. Information exchange should be purpose-limited, auditable and subject to data-protection safeguards. The goal should be to connect actionable information, not to create indiscriminate surveillance systems.

Airlines should review personnel-security programmes as continuing risk-management processes. Reviews should be proportionate, evidence-based and consistent with employment law and privacy protections. Staff need confidential reporting channels, clear escalation criteria and assurance that concerns will be assessed fairly. Security teams should coordinate with operational managers while avoiding unsupported psychological or ideological profiling.

Aviation authorities should commission a safety-focused review of FZ1073, coordinated with the criminal investigation and consistent with applicable international procedures. The review should examine the sequence of cockpit access, alerting, crew coordination, intervention, aircraft recovery and diversion. Findings that can improve safety should be shared with operators without compromising the criminal process or releasing sensitive details that could create new vulnerabilities.

Airlines and regulators should strengthen recurrent training for cockpit and cabin personnel in threat recognition, communication under stress, emergency coordination and recovery from incapacitation. Training must be realistic but should not assume that passengers can or should take on flight-crew responsibilities. Emergency procedures should prioritise crew coordination and safe control of the aircraft.

International bodies, particularly ICAO, should support the exchange of anonymised lessons from insider-related incidents and encourage common principles for reporting, investigation and corrective action. Cooperation should include clear distinctions between criminal evidence and safety findings, so that learning does not depend on the conclusion of every legal proceeding. Implementation should be evaluated through measurable indicators, such as timely review of credible reports, completion of corrective actions, exercise outcomes and audit findings—not simply the number of checks conducted.

7. Conclusion

The history of aviation terrorism demonstrates that civilian aircraft have been used as instruments of coercion, hostage-taking and, in the case of 9/11, mass-casualty attack. The UAE authorities’ account of FZ1073 places the incident within that history by alleging a premeditated plan to use the aircraft against an airport terminal. Because the investigation remains ongoing, claims about accomplices and wider connections must remain qualified.

The principal policy lesson is broader than the eventual legal classification of this individual case. Aviation security cannot rely exclusively on keeping unauthorised actors outside the cockpit. It must also manage risks associated with trusted access, maintain resilient crew and operational systems, connect relevant intelligence lawfully, and learn from incidents through coordinated safety review.

The appropriate response is neither complacency nor indiscriminate suspicion. It is a proportionate, evidence-led security architecture that protects civil aviation while respecting due process and individual rights. FZ1073 was diverted and landed
safely; the task for the aviation community is to ensure that the lessons are converted into verifiable improvements before another incident tests the same safeguards.

References

Federal Bureau of Investigation. (n.d.). Hijacking of TWA Flight 847. https://www.fbi.gov/history/famous-cases/twa-flight-847-hijacking

International Civil Aviation Organization. (n.d.). Legal instruments related to aviation security. https://www.icao.int/Security/Pages/Legal-Instruments.aspx

International Civil Aviation Organization. (2024). Global Aviation Security Plan (GASeP) (2nd ed.). https://www.icao.int/Security/Pages/Global-Aviation-Security-Plan.aspx

Jackson, R. (2014). Constructing enemies: “Islamic terrorism” in political and academic discourse. Government and Opposition, 49(3), 394–426. https://doi.org/10.1017/gov.2013.40

Nesser, P. (2016). Islamist terrorism in Europe: A history. Oxford University Press. https://doi.org/10.1093/acprof:oso/9780190264024.001.0001

National Commission on Terrorist Attacks Upon the United States. (2004). The 9/11 Commission report. U.S. Government Printing Office. https://www.9-11commission.gov/report/911Report.pdf

Reuters. (2026, October 2). Explainer: What do we know about flydubai flight 1073? https://www.reuters.com/world/middle-east/what-do-we-know-about-flydubai-flight-1073-2026-10-02/

United States Department of State. (1999, December 27). India: Hijacking of Indian airliner. https://1997-2001.state.gov/briefings/statements/1999/ps991227a.html

United Arab Emirates Ministry of Foreign Affairs. (2026, October 1). UAE following incident involving flydubai flight to Tel Aviv. https://www.mofa.gov.ae/en/MediaHub/News/2026/10/1/UAE-fly-dubai

Emirates News Agency. (2026a, October 3). Planning, attempted terrorist act behind flydubai flight FZ1073 incident: Attorney-General. https://www.wam.ae/en/article/17gemrc-planning-attempted-terrorist-act-behind-flydubai

Emirates News Agency. (2026b, October 9). UAE Attorney-General announces updates on investigation into the flydubai flight FZ1073 incident. https://www.wam.ae/en/article/c2nmy0l-uae-attorney-general