Delta Wi-Fi Blocked and Spoofed on Flight from LAS to ATL
NEOSEC enrichment — no mirror of the original source
On August 10, 2026, the pilots of Delta flight 591 from Las Vegas to Atlanta sent mid-flight messages to air traffic control at 12:34 and 12:51 UTC, reporting that a passenger had created an unauthorized "Delta WiFi Fast" network and blocke
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Editorial context in the original issue
The SANS NewsBites issue carries commentary by: Dukes, Honan, Neely, Pescatore, Skoudis, Ullrich.
More on Blocked
Other advisories
- Not ratedosv:CLEANSTART-2024-AY27811If there was a PAC URL set and the server that hosts the PAC was not reachable, OCSP requests would have been blocked, resulting in incorrect error pages being shown
- Not ratedosv:CLEANSTART-2024-SS81265If Content Security Policy blocked frame navigation, the full destination of a redirect served in the frame was reported in the violation report; as opposed to the original frame URI
- Not ratedosv:CLEANSTART-2024-QI66292If there was a PAC URL set and the server that hosts the PAC was not reachable, OCSP requests would have been blocked, resulting in incorrect error pages being shown
- Not ratedosv:CLEANSTART-2024-JZ28094Line directives ("//line") can be used to bypass the restrictions on "//go:cgo_" directives, allowing blocked linker and compiler flags to be passed during compilation
- HighCVE-2026-108529SETTINGS and stream-0 WINDOW_UPDATE frames trigger quadratic work over blocked streams in Bandit
- Not ratedosv:CVE-2026-108529SETTINGS and stream-0 WINDOW_UPDATE frames trigger quadratic work over blocked streams in Bandit
- MediumCVE-2026-115750mcp-from-openapi 2.2.0 before 2.9.0 SSRF blockedHosts Bypass via Trailing-Dot Hostname
- HighCVE-2026-62197OpenClaw: Browser CDP discovery could accept blocked WebSocket URLs
Other news entries
- Cloud Security Alliance Survey Finds Data Loss Prevention Often Detects Data Loss Only After It HappensNewsDark Reading
- Pizza Hut Japan: attackers accessed the online-ordering payment API, up to about 4.48M records exposedBreachpwn.watch
- OpenCode Console breach exposes users' saved OpenAI / Anthropic / Google API keysBreachpwn.watch
- FBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure IntrusionsNewsThe Hacker News
- Microsoft Outlook to block MSIX attachments starting NovemberNewsBleepingComputer
- Ofcom discovers issuing Online Safety Act fines is easier than collecting themNewsThe Register — Security
- The Top 4 Threats We Found by Investigating Every Alert for a QuarterNewsBleepingComputer
- ⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and MoreNewsThe Hacker News
ID