On 30 September, flydubai co-pilot Hamam al-Hammami, a 29-year-old Omani national, allegedly used a crash axe to attack the captain mid-flight and attempt to seize control of a Tel Aviv-bound aircraft carrying 182 people. Passengers and crew intervened. A reserve pilot aboard landed the plane at a regional airport in north-western Saudi Arabia, where Hammami was detained. The pilot, Smit Machchhar, survived despite repeated blows to the head and managed to unlock the cockpit security door that allowed passengers to overpower the attacker. The investigation has now fractured across at least four countries. New Zealand police confirmed Hammami spent 175 days in the country on a student visa from November 2018 to May 2019, completing flight training through a UK-based company no longer operating there. Australia's security agencies are investigating his earlier two-year stint as an engineering student at RMIT University in Melbourne, which he left without completing his degree around 2017. Israeli and regional officials believe the attack was originally planned for July but postponed. The timeline is damning for vetting systems. Hammami moved through Australia, New Zealand, and the UK-linked training pipeline before joining flydubai — a carrier operating high-profile routes including to Israel. At no point did any flag apparently connect his movements or associations across jurisdictions. Each country is now investigating independently, precisely the fragmentation that enabled the gap in the first place. Australia's Executive Council of Australian Jewry has called for a thorough investigation of Hammami's associations during his time in the country, pointing to the availability of extremist literature and the presence of radical preachers as ongoing vulnerabilities. A deleted social media profile and X account linked to Hammami reportedly described his overseas study years as 'the golden years of my religious commitment,' with a claimed decline in observance after returning to Oman. The structural question is not whether this individual was radicalised — investigators will determine that. The structural question is how a commercial airline co-pilot with training credentials spanning multiple jurisdictions underwent no cross-border vetting that caught whatever trajectory led to an axe attack at 35,000 feet. Aviation security post-9/11 hardened cockpit doors but left the insider threat — the person already inside the cockpit — addressed primarily by airline-level background checks. Flydubai, a Dubai-based budget carrier, now faces reputational and operational scrutiny. The airline's hiring pipeline drew from training programmes in New Zealand and the UK. The reserve pilot who landed the aircraft was a passenger, not a scheduled safety redundancy. The entire survival of 182 people depended on the captain's ability to unlock a door while being attacked and on the physical intervention of untrained passengers. The investigation will test whether multilateral intelligence-sharing on aviation personnel can move faster than the next insider threat. Every country involved is reconstructing Hammami's history after the fact. The question for the next twenty years is whether any system gets built to do it before.
