GPS/GNSS spoofing attacks now affect 1,500+ commercial flights per day and caused at least one fatal crash, but aviation receivers have no authentication capability to reject fake signals

GPS spoofing incidents affecting aviation increased by 500% between early 2024 and 2025, rising from approximately 300 to over 1,500 flights affected per day globally. The attacks are concentrated in conflict-adjacent regions: the Middle East (over 50,000 flights affected in 2024, with pilots misbelieving they were over airports in Beirut or Cairo), the Baltic region (46,000 incidents between August 2023 and April 2024), and Eastern Europe. On December 25, 2024, Azerbaijan Airlines Flight 8243 crashed near Aktau, Kazakhstan after experiencing GPS jamming followed by spoofing, killing 38 of 67 people on board. Lithuania recorded 1,000+ GPS interference cases in June 2025 alone -- 22x higher than June 2024. Why it matters: Civilian GPS receivers in aircraft cannot authenticate signals, so any ground-based transmitter with sufficient power can override legitimate satellite signals, so pilots lose reliable position information during critical phases of flight, so automated approach and landing systems produce dangerous guidance errors, so aviation safety degrades in any region near a conflict zone where electronic warfare is employed, so commercial air routes must be rerouted at enormous fuel and time cost or accepted at elevated risk. The structural root cause is that the GPS L1 C/A civilian signal was designed in the 1970s without any authentication or encryption, and retrofitting authentication into the aviation receiver fleet requires new receiver hardware in approximately 25,000 commercial aircraft worldwide -- a process that takes 15-20 years through the FAA/EASA certification pipeline -- so the vulnerability window will persist for at least a decade even if solutions are mandated today.