Reported by 4 outlets

Timeline

1. original reporting

   DEF CON Attendees Accused of Hacking In-Flight Wi-Fi, Federal Agents Meet Plane

   cyberpress.org · 63d ago · August 12th, 2026

   A Delta Air Lines flight carrying passengers home from the world’s largest hacking conference became the center of a rapidly unfolding cybersecurity scare on Monday after crew members reported that someone on board had jammed the aircraft’s official Wi-Fi. The incident occurred aboard Delta Flight 591, a Boeing 757 that departed Las Vegas Harry Reid International Airport around 8:30 a.m. on August 10, following an overnight delay, and flew roughly three and a half hours toward Atlanta. About sixty minutes into the journey, pilots messaged corporate security via ACARS that a passenger had created a “scam Wi-Fi” network named Delta WiFi Fast. DEF CON Attendees Accused of Hacking In-Flight Wi-Fi A follow-up transmission stated that “a bunch of pax that were at a cyber conference in Vegas… were able to jam our Wi-Fi and broadcast their signal,” a message independently picked up by two ground-based ACARS receivers. The flight departed shortly after DEF CON 34 concluded, as part of the annual “Hacker Summer Camp” cluster, which also includes Black Hat and BSides Las Vegas. Security researchers describe the reported activity as a textbook evil twin attack , in which an attacker broadcasts a rogue access point whose SSID mimics a trusted network, luring users onto a fraudulent captive portal that harvests credentials. Social media and private flyer group posts alleged that the operators used a portable auditing tool, such as a Wi-Fi Pineapple, to deauthenticate devices from the legit

2. update from cyberscoop.com

   Delta investigates in-flight Wi-Fi spoofing on post-DEF CON flight from Las Vegas

   cyberscoop.com · 63d ago · August 11th, 2026

   Delta Airlines said Tuesday it’s investigating an incident on a Monday flight where a passenger reportedly used an unidentified device to spoof the airline’s in-flight Wi-Fi network, leading to severe delays and authorities to board the plane once it arrived at its destination. Various posts on several social media networks went viral early Tuesday detailing the incident, claiming that passengers on Delta flight 591 from Las Vegas to Atlanta used an unidentified device to create a rogue Wi-Fi network that could be used to steal people’s sensitive data or personal information. Messages from the plane’s Aircraft Communications Addressing and Reporting System (ACARS) show that the crew informed personnel on the ground that a passenger set up a network called “Delta WiFi Fast” and was “trying to scam the other passengers.” Morgan Durrant, a Delta spokesperson, told CyberScoop that the cabin crew deactivated the aircraft’s WiFi functionality for approximately 30 minutes, the flight’s safety was never in question and no aircraft operating systems were affected. “We are fully investigating to gather a complete set of facts, which will take time,” Durrant told CyberScoop. “We will partner with federal law enforcement and aviation regulators to ensure the incident is thoroughly investigated. We thank our crew for their professionalism and our customers for their understanding.” The Atlanta office of the FBI, along with the Federal Aviation Administration, said it was aware of the inci

3. update from bleepingcomputer.com

   Delta probes Wi-Fi deauth attack on flight carrying DEF CON attendees

   bleepingcomputer.com · 63d ago · August 11th, 2026

   ​The company told BleepingComputer that the incident occurred yesterday on Flight 591 and did not affect the safety of the passengers or aircraft operating systems. “One initial finding is an unauthorized WiFi network, which was not provided, operated, or supplied by Delta, was present onboard the aircraft for a short time during the flight.” After learning about the unauthorized wireless network, the cabin crew deactivated the Wi-Fi functionality in the aircraft for nearly 30 minutes. Wi-Fi deauth attack According to online reports, several passengers returning from the DEF CON 34 hacking conference allegedly carried out a Wi-Fi deauthentication attack mid-flight, disconnecting other passengers from the aircraft's wireless in-flight network. In a deauthentication attack, clients connected to a Wi-Fi network receive forged packets pretending to be from the legitimate access point (AP), telling them to disconnect. An attacker can observe wireless traffic to identify the access point's MAC address, then forge deauthentication frames with the AP's address as the source and send them to connected clients. ​By repeatedly transmitting for

4. mentioned by gbhackers.com

   DEF CON Attendees Allegedly Jam Plane Wi‑Fi, Launch ‘Evil Twin’ Phishing Attack

   gbhackers.com · 63d ago · August 12th, 2026