Quick answer: On 30 September 2026, the first officer of Flydubai flight FZ1073 from Dubai to Tel Aviv stabbed Captain Smit Machchhar in the cockpit in what officials describe as an attempt to crash the aircraft. Despite serious wounds, the captain opened the locked cockpit door, passengers overpowered the attacker, and the Boeing 737 landed safely in Tabuk, Saudi Arabia. The incident shows a weakness every organisation shares: security built to stop outsiders does little against a trusted insider. Key takeawaysCaptain Smit Machchhar, an Indian pilot, opened the cockpit door while badly wounded, letting passengers stop the attack.Netanyahu called him “a hero for Israel, India, and the entire world” and invited him and PM Modi to light a flame on Israel’s Independence Day.The reinforced cockpit door worked as designed, but it is designed to keep attackers out, not to stop a threat already inside. Businesses face the same gap. The attack on Flydubai flight FZ1073 has been one of the most widely followed stories of the past week, and for good reason. It is a story of extraordinary courage. It is also a sharp reminder, for airlines and for every business that relies on security systems, that the most dangerous threat is often the one that already has the keys. What happened on Flydubai flight FZ1073 The flight left Dubai for Tel Aviv on Wednesday, 30 September 2026, with more than 170 people on board. According to reports from CNN, CBS News and Al Jazeera, the first officer attacked Captain Machchhar in the cockpit and stabbed him several times. The aircraft began a steep descent. The attackThe first officer stabbed the captain in the locked cockpit. “When I was lying on the floor I could feel the aircraft was going down,” Captain Machchhar later told PM Modi (CBS News).The doorSeriously wounded, the captain managed to unlock the cockpit door from the inside.The passengersPassengers and crew rushed in and overpowered the attacker. Reports say an Israeli dentist on board helped keep the captain alive.The landingThe flight diverted to Tabuk in north-western Saudi Arabia and landed safely. Al Jazeera reported that a third pilot on board took the controls. Captain Machchhar underwent surgery and is reported to be in stable condition. The first officer was transferred to the UAE for questioning, and investigations by the authorities involved are continuing. Flydubai suspended its Israel flights while the incident is investigated. What is still unconfirmed: the attacker’s motive and background are under investigation. Israeli officials have described the attack as a deliberate attempt to crash the aircraft; the airline and Saudi authorities have asked people not to speculate while the investigation continues. A hero for India and Israel Captain Machchhar has been praised around the world. Prime Minister Narendra Modi called him in hospital, telling him: “Get better and healthy, the whole nation is with you.” The captain told Modi, “I am confident of my recovery and return.” Israeli Prime Minister Benjamin Netanyahu also spoke to him, saying: “You are a hero for Israel, India, and the entire world. I invite Prime Minister Narendra Modi and you to light a flame on Israeli Independence Day.” Lighting a torch at the Independence Day ceremony is an honour usually reserved for Israeli citizens. Israel’s Independence Day, Yom Ha’atzmaut, falls in April or May. Cockpit doors use keypads and electronic locks built to keep intruders out. The Flydubai attack came from inside. Why the cockpit door could not stop this attack After the 11 September 2001 attacks, airliners were fitted with reinforced cockpit doors that stay locked throughout the flight. Al Jazeera describes them as “designed to resist forcible intrusion and penetration by small firearms”, with an emergency keypad that allows delayed access from the cabin and a control inside the cockpit to deny it. That design is excellent at one job: keeping an attacker out. But as experts quoted by Al Jazeera put it, these systems “are designed to keep an attacker out of the cockpit, not to stop a threat already inside it”. Aviation has seen this before. In 2015, the co-pilot of Germanwings flight 9525 locked the captain out and crashed the aircraft, killing all 150 people on board. Afterwards, the European Union Aviation Safety Agency recommended that two people be in the cockpit at all times, a rule it later made risk-based, leaving the decision to airlines. On FZ1073, the same locked door that protects pilots kept help out, until the wounded captain opened it himself. The insider-threat lesson for every business Most business security works like a cockpit door. Firewalls, passwords, VPNs and office access cards are built to stop strangers. The harder problem is a trusted person with legitimate access, whether they act deliberately, are pressured by someone else, or simply make a serious mistake. Aviation’s defences translate surprisingly well into business systems: Aviation safeguardBusiness equivalentWhat it preventsTwo people in the cockpitTwo-person approval (“four eyes”) for payments, deletions and production changesOne person taking a damaging action aloneEmergency access keypad“Break-glass” admin accounts, stored securely and alarmed when usedBeing locked out of your own systemsMedical and psychological checksBackground checks, plus ongoing reviews, not just at hiringRelying on a one-time snapshotFlight data and voice recordersAudit logs for logins, data exports and permission changesProblems going unnoticed or unexplainedOnly qualified crew on the flight deckLeast-privilege access: people get only the access their role needsOne account being able to do everything Pilot vetting is thorough, but as aviation analyst Saj Ahmad told Al Jazeera, “those checks are a single snapshot in time”. The same is true of an employee’s background check or a contractor’s onboarding. Good security keeps checking. Five practical steps for your business Review who has admin access to your website, CRM, cloud accounts, domain and payment tools. Remove anyone who no longer needs it.Require approval for high-risk actions such as bulk data exports, payments above a limit and changes to live systems.Turn on audit logs and alerts for unusual activity, such as logins at odd hours or large downloads.Offboard properly: when someone leaves, remove their access the same day, including shared passwords.Plan for emergencies: keep a secure “break-glass” account so a single person can never lock the business out. None of this assumes your team is untrustworthy. Like the two-person rule in a cockpit, these controls protect good people from mistakes and from those who would abuse their position. Frequently asked questions What happened on Flydubai flight FZ1073? On 30 September 2026, the first officer attacked Captain Smit Machchhar in the cockpit of the Dubai to Tel Aviv flight. The wounded captain opened the cockpit door, passengers subdued the attacker, and the aircraft landed safely in Tabuk, Saudi Arabia. Who is Captain Smit Machchhar? He is the Indian captain of Flydubai flight FZ1073. Despite being stabbed several times, he opened the locked cockpit door so passengers could stop the attack. PM Modi and Israeli PM Netanyahu have both praised him as a hero. What is an insider threat? An insider threat is a risk that comes from someone with legitimate access, such as an employee, contractor or partner, who misuses that access deliberately or by mistake. Controls such as least-privilege access, two-person approval and audit logs reduce the risk. Why couldn’t the cockpit door stop the attack? Reinforced cockpit doors are designed to keep attackers out of the cockpit. They are not designed to stop a threat from someone who is already inside, which is why the captain had to open the door himself for help to reach him. We build secure websites, CRMs and business systems with role-based access, approvals and audit logs built in. See our website development and enterprise software services, or get a free consultation. SourcesCBS News: Flydubai captain tells India’s leader how he saved himself and 173 othersCNN: Captain Smit Machchhar, the pilot who thwarted the Flydubai attackerThe Jerusalem Post: Netanyahu speaks to Flydubai captainThe Times of Israel: Netanyahu invites Flydubai pilot and PM Modi to light Independence Day torchAl Jazeera: How safe are planes if a pilot turns violent?Al Jazeera: How was the Flydubai pilot cleared to fly?EASA: Follow-up of the Germanwings 9525 accident, two-person cockpit recommendation