The Hidden Security Dilemma of a More Connected Middle East

The attempted FlyDubai Flight FZ1073 hijacking exposes a new challenge for Israel, Europe and the Gulf states: protecting an increasingly interconnected region from threats that transcend national borders.
By Moataz Khalil

On September 30, 2026, a FlyDubai flight traveling from Dubai to Tel Aviv came dangerously close to becoming a mass-casualty terrorist attack. According to findings released by the United Arab Emirates' public prosecutor, 29-year-old Omani co-pilot Hamam al-Hammami attempted to seize control of FlyDubai Flight FZ1073 and crash it into the passenger terminal at Israel's Ben Gurion International Airport. Inspired, prosecutors said, by the September 11 attacks, al-Hammami had reportedly flown the Dubai–Tel Aviv route twice previously to familiarize himself with his intended target.
As the aircraft approached Israeli airspace, al-Hammami attacked Indian captain Smit Machchhar with an emergency axe inside the cockpit. Despite suffering serious injuries, Machchhar managed to open the cockpit door, allowing passengers and crew to overpower the attacker. The aircraft plunged an estimated 14,000 to 16,000 feet before its descent was arrested. Two reserve pilots subsequently helped bring the aircraft to an emergency landing in Tabuk, Saudi Arabia, averting what could have been one of the deadliest aviation terrorist attacks in recent history.
The incident exposed an extraordinary contradiction. The alleged attacker was a trusted employee of a government-owned Emirati airline operating a routine commercial route to Israel, a country with which the UAE had normalized relations six years earlier. According to Emirati prosecutors, he had passed the airline's professional and security checks without displaying indicators that revealed his intentions. Yet he was allegedly preparing to use that same professional access to carry out an attack against Israel.
The successful intervention by passengers, crew and Saudi authorities demonstrated the remarkable changes that have taken place in the Middle East. Saudi Arabia, which has no formal diplomatic relations with Israel, provided a safe landing and medical assistance to the passengers and crew.
But the incident also revealed a difficult security question facing the emerging regional order: How can Israel and its Arab partners preserve the benefits of greater openness when the people moving through their increasingly interconnected systems no longer fit traditional security categories?
The Abraham Accords Changed More Than Diplomacy
The Abraham Accords transformed the relationship between Israel and several Arab states, particularly the United Arab Emirates, Bahrain and Morocco. Direct flights, business partnerships, tourism and security cooperation created connections that would have been difficult to imagine a decade earlier. As a recent Middle East Journal analysis of the Accords' sixth anniversary documented, passenger traffic between Israel and the UAE reached approximately 1.53 million in 2025, up more than 70 percent from the previous year. At peak capacity, the two countries were connected by 136 direct flights per week.
But these new connections also transformed the security environment. The Gulf's aviation, tourism, logistics and financial industries depend on multinational workforces drawn from across the Middle East, South Asia, Africa and Europe. An Emirati airline may employ citizens from countries that maintain close relations with Israel alongside nationals of states that refuse to recognize it. A European airline can operate flights to Tel Aviv with crew members whose citizenship, family history and previous places of residence span several continents.
None of this is inherently suspicious. Multinational employment is central to the Gulf's economic success. Yet it complicates security screening because the political relationship between two governments cannot establish the reliability or intentions of every individual moving between them.
The distinction becomes especially important when those individuals possess privileged professional access. Airline crews, airport employees, engineers and contractors may be authorized to enter restricted facilities or operate critical systems that ordinary travelers cannot reach.
The International Civil Aviation Organization has issued guidance about vulnerabilities associated with insider threats. Initial background checks cannot eliminate future risks, particularly when an individual develops hostile intentions after entering employment. Continuous assessment, access controls and mechanisms for identifying credible warning signs are therefore essential.
The FlyDubai attack illustrates this problem with unusual clarity. The alleged perpetrator did not need to evade airport security as a passenger or smuggle a weapon through a checkpoint. He was already authorized to sit in the cockpit where a weapon was waiting for him - the emergency axe and his captain’s trust.
Israel's Immediate Response—and Its Limitations
The attack has already prompted changes to Israeli aviation security. According to reporting on new Israeli restrictions, airlines flying to Israel have been instructed not to assign crew members holding citizenship or dual citizenship from 31 designated countries, many of which do not maintain diplomatic relations with Israel. Air France and Czech airline Smartwings were among the carriers reported to be complying with the requirements.
Such restrictions reflect the immediate pressure on governments to prevent another attack. Nationality-based rules are relatively straightforward to administer and may reduce exposure to certain categories of risk. But they also expose the limitations of relying on passports as security indicators.
Israel's intelligence services have never operated exclusively according to nationality. For decades, they have evaluated complex travel histories, dual citizenship, personal backgrounds and individual security information. The question is not whether Israeli intelligence has suddenly discovered that nationality is an imperfect measure of risk. Rather, it is whether existing screening practices, intelligence-sharing arrangements and aviation regulations can adequately address the scale and complexity of today's international mobility.
A nationality-based restriction may prevent certain individuals from serving on flights to Israel, but it cannot establish whether a European citizen has extremist affiliations, whether an employee has been radicalized after hiring, or whether relevant intelligence is held by another country and has never been shared.
The challenge is therefore to move beyond the passport without abandoning the legitimate need for rigorous security screening.
The European Passport Challenge
Europe presents another dimension of the same dilemma. Over the past two decades, migration, refugee movements, family reunification and naturalization have transformed the composition of European societies. The Syrian civil war accelerated these changes, bringing large numbers of people from Syria and other parts of the Middle East to countries such as Germany, Sweden, the Netherlands and France. Many migrants have since acquired European citizenship, while millions of other Europeans of Arab or Muslim background were born and raised in Europe.
For intelligence agencies, this means that a European passport does not necessarily provide a complete account of an individual's previous residences, international relationships or activities. Nor does it reveal whether someone has encountered extremist networks, participated in conflicts abroad or acquired radical beliefs.
Crucially, Middle Eastern ancestry or Muslim identity is not evidence of such involvement. Most people with these backgrounds present no security threat, and treating them collectively as suspicious would generate enormous numbers of false positives while diverting resources from genuine warning signs.
The challenge lies in identifying particular individuals for whom credible, specific intelligence exists—regardless of whether they hold Syrian, German, French, Omani or Emirati citizenship.
Europe has already developed mechanisms for this purpose. The European Union's Schengen Information System enables participating countries to exchange alerts concerning wanted persons, terrorism suspects and other relevant security matters. It incorporates biometric information to help identify individuals across borders and reduce dependence on names or travel documents alone.
However, intelligence sharing becomes more complicated when relevant information lies outside Europe, particularly in countries affected by war, weak governance or limited cooperation with Western security institutions. An individual may have a clean European criminal record while parts of their earlier history remain difficult to establish.
The answer cannot be to assume that naturalized Europeans are less trustworthy than other citizens. It is to recognize that passports establish legal nationality, while meaningful security assessments require reliable, individualized information.
The Security Challenge Facing Arab Governments
The FlyDubai incident is not only an Israeli security concern. It raises equally consequential questions for Arab governments whose economic models depend on international connectivity.
The UAE has built its global position around open commerce, international aviation, foreign investment and a large multinational workforce. Saudi Arabia is pursuing a similar transformation through its economic diversification plans, while other Gulf states continue expanding their roles as international transport, financial and logistics hubs.
These countries must protect their own institutions, populations and infrastructure from threats that can emerge within legitimate commercial and professional networks. Extremist movements hostile to Israel may also oppose Arab governments that maintain relations with Israel, cooperate with Western powers or reject their ideological agendas. At the same time, protecting these societies requires distinguishing genuine extremist activity from legitimate political and religious expression.
The FlyDubai case offers a revealing example. According to Associated Press reporting, al-Hammami had previously been barred from flying in Oman over concerns about extremist views. Yet that information apparently failed to prevent his subsequent employment by FlyDubai or his assignment to an Israel-bound flight.
Emirati officials also said that passenger and crew information had been transmitted to Israel in advance, without Israeli authorities raising objections. The precise institutional breakdown remains under investigation, but the discrepancy between information reportedly available in Oman and the security clearances obtained elsewhere illustrates a fundamental problem: intelligence held by one country does not automatically reach the institutions that need it in another.
This vulnerability transcends Israeli-Arab relations. An extremist employee could target an Emirati airport, a Saudi energy installation, a European transport hub or an international business operating in the Gulf. The common denominator is not the employee's nationality, but the combination of hostile intent, privileged access and incomplete information.
The same networks that connect economies and societies can also connect potential targets. Consequently, regional integration increasingly requires security cooperation extending beyond traditional military and diplomatic relationships.
Building a Security Architecture for a Connected Region
The answer is not to reverse the economic and diplomatic opening that has transformed the Middle East. Nor is it realistic to assume that stricter nationality-based screening alone can eliminate the danger. What is needed is a more comprehensive approach that combines individual risk assessments, institutional safeguards and cross-border intelligence cooperation.
First, Israel and its regional partners should strengthen mechanisms for sharing specific, actionable intelligence concerning individuals who may pose credible threats to aviation and critical infrastructure. The FlyDubai investigation raises obvious questions about whether information held by authorities in Oman could have been communicated more effectively to Emirati aviation regulators and employers. Similar arrangements could facilitate cooperation with European security agencies, particularly in cases involving individuals whose histories span several jurisdictions.
Second, airlines and other operators of sensitive infrastructure should treat security screening as a continuous responsibility rather than a one-time hiring requirement. The ICAO's insider-threat guidance recommends recurrent background checks, staff awareness programs and secure channels for reporting suspicious conduct. The objective should be to identify credible indications of dangerous behavior or intent, regardless of an employee's citizenship or background.
Third, Israel, European governments and willing Arab partners could expand joint aviation-security exercises, emergency-response coordination and arrangements for rapidly communicating relevant threat information. Some cooperation already exists, but the complexity of contemporary aviation requires governments to review whether their systems are sufficiently integrated.
The FlyDubai incident also demonstrated the value of cooperation during an emergency. As Middle East Journal has argued in its analysis of regional security cooperation, practical coordination is essential even when formal normalization remains politically difficult. Building more predictable arrangements for emergencies would strengthen regional resilience without necessarily requiring every political disagreement to be resolved first.
Finally, security agencies must avoid confusing identity with ideology. The globalization of citizenship, employment and travel makes nationality an increasingly incomplete source of information, but replacing it with assumptions about ethnicity or religion would create new problems rather than solve existing ones. Effective intelligence depends on identifying meaningful threats, not treating entire communities as potential suspects.
The Next Challenge for the New Middle East
The attempted FlyDubai attack exposed more than the vulnerability of a single commercial flight. It revealed the tension between an increasingly connected Middle East and security systems that must operate across national jurisdictions, institutions and political relationships that remain fragmented.
The Abraham Accords helped transform regional relations by creating new opportunities for cooperation, commerce and mobility. Yet those achievements have also increased the importance of protecting shared infrastructure, improving intelligence coordination and understanding threats that cross borders more easily than government information often does.
This does not mean Israel's intelligence doctrine has become obsolete, nor does it establish that the region's security institutions are fundamentally inadequate. It means that even highly experienced intelligence services face a constantly changing environment in which access, identity and intent are increasingly difficult to evaluate through traditional national categories alone.
The lesson of FlyDubai Flight FZ1073 is therefore not that regional openness is inherently dangerous. It is that openness creates responsibilities that extend beyond the countries directly participating in it.
The next stage of Middle Eastern integration must involve more than connecting airports, markets and governments. It must also connect the intelligence, aviation-security and emergency-response systems responsible for protecting them.
The challenge for Israel and its Arab partners is no longer simply securing their individual borders. It is developing a security architecture capable of protecting a region whose people, institutions and economies are becoming increasingly interconnected.
Moataz Khalil is an Egyptian, London-based journalist and media researcher specializing in Iran and Middle East affairs. He is a senior contributor to Middle East 24 and MidEast Journal and has written for media platforms across the Middle East.