Frontline Watch provides a weekly update on emerging terrorist activities and global threat trends, with Counterterrorism Managing Editor Dr. Mahmut Cengiz examining the developments shaping the security landscape both domestically and internationally, with research assistance from Sean Dilallo.
This week’s edition includes panel reports from the Counterterrorism 2026 Summit, held by Homeland Security Today on April 20–21. The reports cover the following panels: Iran’s Proxy Warfare & Escalation Dynamics; The Global Salafi-Jihadist Ecosystem; Terrorist Financing; The Era of the Agentic Analyst; Mexico: Cartels as Terror/Transnational Threats; Current Trends in Radicalization; The U.S. Domestic Threat Landscape; Protecting Critical Infrastructure in a Multi-Domain Threat Environment; Narratives & Strategic Influence; Cyber & AI in the Terrorism Battlespace; and U.S. Counterterrorism Strategy & Mega-Event Security.
The edition also provides a review of U.S. military operations and policy signals related to counterterrorism, as well as notable terrorist attacks recorded between April 18 and April 24.
Counterterrorism Snapshot: Operations and Policy Signals (April 18 – April 24)
On April 20, 2026, near Bossaso, Somalia, U.S. Africa Command (AFRICOM) conducted airstrikes against ISIS-Somalia.
On April 21, 2026, near Kismayo, Somalia, U.S. Africa Command (AFRICOM) carried out airstrikes against Al-Shabaab.
On April 22, 2026, in North Carolina, United States of America, the Davidson County Sheriff’s Office, in conjunction with the FBI, arrested two people who were allegedly planning an attack on a Jewish school in Houston, Texas.
Notable Terrorist Attacks
On April 18, 2026, in Bannu District, Khyber Pakhtunkhwa, Pakistan, a security forces vehicle struck an IED, killing three police officers and injuring three bystanders. Aswad ul Harb’s Huzaifa Ishtihsadi Kandaak, a group aligned with the Hafiz Gul Bahadur Group, claimed responsibility for the attack.
On the night of April 18-19, 2026, in North London, United Kingdom, Ashab Al Yamin carried out an arson attack on the Kenton United Synagogue. No casualties were reported. Ashab Al Yamin has claimed responsibility for 16 attacks since they first emerged in early March.
On April 20, 2026, in the Tirah Valley, Khyber Pakhtunkhwa, Pakistan, unknown gunmen kidnapped four construction workers. This attack is one example of the deteriorating security situation in Khyber Pakhtunkhwa.
On April 21, 2026, in Borno State, Nigeria, suspected members of Boko Haram stormed two villages, killing at least 20 people and setting homes on fire.
On April 22, 2026, in Chagai District, Balochistan, Pakistan, militants attacked a copper and gold mining project, killing at least nine employees, including two security guards. There are also reports that foreign nationals working at the site were killed or kidnapped during the attack. No group has claimed responsibility yet. However, Baloch militant groups, such as the Balochistan Liberation Army (BLA), have frequently targeted mining and other extraction projects in the region.
Notes and Key Takeaways from the Counterterrorism 2026 Summit Panels
Counterterrorism 2026: Iran’s Proxy Warfare and Escalation Dynamics
By Kyle Watkins
- Iran uses a flexible proxy network to project power while avoiding direct conflict, prioritizing operational effectiveness and loyalty over strict ideological alignment.
- Despite pressure that has weakened major groups like Hezbollah and the Houthis, the network is adapting through decentralization and remains resilient rather than in decline.
- Proxy activity is expanding into Europe, with increased reliance on local recruits and criminal networks, creating more complex and harder-to-counter security threats.
The panel “Iran’s Proxy Warfare and Escalation Dynamics,” held at Counterterrorism 2026, examined how Iran’s use of proxy actors is affecting regional conflicts and international terrorism. Featuring participants from across the public, private, and academic sectors, including Jay Solomon, Phillip Smyth, Mohammad Al-Basha, K. Campbell, Nawar Shora, and former Iranian diplomat Ebrahim Rothandel, the discussion focused on the structure, ideology, and future of the Iranian Threat Network (ITN). The topic is particularly salient amid intensifying confrontation involving Iran and its partners, alongside proxy-linked activity in Europe. The panel emphasized that Iran’s proxy strategy is adaptive, posing growing challenges for traditional counterterrorism tactics.
Read the rest of the analysis here.
Counterterrorism 2026: The Global Salafi-Jihadist Ecosystem
By Matthew McHenry
- Salafi-jihadi violence is expanding rapidly—especially in Africa’s Sahel and into coastal West Africa—driven by weak governance and growing regional instability.
- Groups like al-Shabaab, JNIM, and ISIS affiliates are evolving from terrorist networks into adaptive insurgencies that control territory and populations, outpacing traditional government responses.
- Effective counterterrorism requires shifting beyond kinetic operations toward governance, state legitimacy, and the disruption of financial and logistical networks to address increasingly transnational threats.
Last week, Homeland Security Today held its 2026 Counterterrorism Summit, a highly informative event featuring academics and practitioners who discussed all forms of terrorism and the future of counterterrorism. The session on the global Salafi-jihadi ecosystem focused on the resilience of the Al-Qaeda network and Islamic State affiliates, threats in the Sahel and Afghanistan, and whether leadership decapitation is an effective tactic for these groups. The session was moderated by Daniel Eizenga, with Dr. Tricia Bacon, Jeff Parsons, Pearl Matibe, and Mohamed Abdurahman as panelists who discussed the various realms of the Salafi-jihadi ecosystem. This topic matters in today’s counterterrorism landscape because the network can persist, adapt, and spread worldwide, posing challenges for traditional counterterrorism approaches.
Read the rest of the analysis here.
Counterterrorism 2026: Terrorist Financing
By Sunbol Mukhtar
- Terrorist financing is becoming more complex and hybrid, combining traditional methods (cash, charities, hawala) with digital tools like cryptocurrency and encrypted platforms, making detection more difficult.
- Weak global enforcement and governance gaps—highlighted by inconsistent application of laws and sanctions—limit the effectiveness of efforts to combat illicit financial networks.
- Technology is driving an arms race: while terrorists use crypto and AI to move small but impactful funds quickly across borders, effective countermeasures require stronger international cooperation and coordinated financial oversight.
During the Terrorist Financing session, moderated by Dr. Mahmut Cengiz, the counterterrorism managing editor at Homeland Security Today, the panelists included Dawson Law, Founder, Conseil Global Advisors; Ari Redbord, former Representative to the United Kingdom, U.S. Department of the Treasury; and a former Senior Advisor to the Deputy Secretary and Undersecretary for Terrorism and Financial Intelligence. The panelists discussed today’s counterterrorism landscape. It is important to note that military action and national laws are insufficient, and preventing terrorism requires countries to improve these complex and challenging elements. This includes tracking financial networks, strengthening institutional capacity at the international level, keeping pace with evolving technology, and aligning efforts across borders and among countries.
Read the rest of the analysis here.
Counterterrorism 2026: Mexican Cartels as Terror/Transnational Threats
By Sean Dilallo
- Mexican cartels remain highly resilient and adaptive: while the Sinaloa Cartel has fragmented due to internal conflict, the Jalisco New Generation Cartel has demonstrated strong institutional continuity despite leadership losses.
- Increased U.S. counter-narcotics pressure has disrupted traditional trafficking routes, but criminal organizations have shifted to new pathways (e.g., South America) and methods like embedding drugs in commercial trade, empowering groups such as First Command of the Capital.
- Effective responses require a holistic strategy that goes beyond targeting cartel leaders to addressing drug demand, corruption, and the broader economic and logistical systems sustaining transnational crime.
During the Mexico: Cartels as Terror/Transnational Threats panel, Peter Reuter, Evan Ellis, and Jake Braun discussed the current trends in Latin American-based transnational criminal organizations. These include the shifts in Mexican Cartels, increased U.S. anti-narcotics efforts, and how criminal organizations have evolved in response to U.S. efforts. Despite considerable counter-narcotic successes, criminal organizations have proven to be resilient and innovative in responding to law enforcement efforts. To address these threats, the United States, along with regional allies and partners, needs to adopt a holistic approach. This includes addressing the domestic demand, criminal groups, drug production, supporting infrastructure, and corruption that form the drug trade.
Read the rest of the analysis here.
Counterterrorism 2026: Current Trends in Radicalization
By Valeria Castro-Rivera and Gina Pokhrel
- Youth radicalization is accelerating globally, driven by digital platforms and AI that amplify extremist content, normalize harmful ideologies, and increase the risk of lone-actor violence.
- Young people are particularly vulnerable due to emotional and social factors, with online communities exploiting isolation and grievances to recruit across borders and cultures.
- Effective prevention requires a comprehensive approach beyond law enforcement, including family engagement, education, community programs, and international cooperation to identify and intervene early.
The panel on “Current Trends in Radicalization” presented differing perspectives on recruitment, prevention, and response, drawing on the expertise of leading professionals in the field. Moderated by Dexter Ingram and featuring Mubin Shaikh, Rick Shaw, and Captain Matthew Turner, the discussion highlighted the exponential rise in youth involvement in extremist movements and the methods used to recruit them through digital platforms. This issue extends beyond the United States, reflecting a broader global concern as young, vulnerable individuals become increasingly susceptible to radical influence. As a result, the rise of youth radicalization has contributed to increases in lone-actor violence, posing challenges for law enforcement detection and placing marginalized communities at heightened risk.
Read the rest of the analysis here.
Counterterrorism 2026: The U.S. Domestic Threat Landscape
By Katelyn Bredow
- The U.S. domestic threat landscape is increasingly decentralized and networked, with lone actors and small online-driven cells replacing traditional hierarchical terrorist organizations.
- Online ecosystems play a central role in radicalization, where grievance-based narratives, accelerationist ideology, and past attack glorification enable rapid self-radicalization and real-world violence.
- Financial complexity, foreign influence (including actors such as Hezbollah), and operational constraints within public security systems make detection and response significantly more difficult.
To kick off day two of the event, a distinguished panel of professionals from diverse backgrounds came together to explore how domestic threats in the United States are rapidly evolving. This panel, moderated by Dr. Mahmut Cengiz, brought together the combined expertise of Jonathan Lewis, Aurora Ortega, Brandon Graham, and David Tyree to discuss the nuances of the U.S. domestic threat landscape in 2026. Each speaker approached the discussion from a distinct angle, bringing a unique perspective to the table. The discussion covered a wide range of timely and important concerns and ultimately emphasized that today’s domestic threat landscape is becoming more decentralized, more digital, more financially complex, and harder to address using traditional counterterrorism approaches.
Read the rest of the analysis here.
Counterterrorism 2026: Protecting Critical Infrastructure in a Multi-Domain Threat Environment
By Alessandro Manzato
- Critical infrastructure defense is hindered by fragmentation across private owners, local governments, and federal agencies, creating gaps that adversaries exploit across physical, cyber, and informational domains.
- The threat landscape is expanding and becoming more accessible, with rising cyber vulnerabilities, commoditized nation-state tools, and increasing pressure on election infrastructure through both technical attacks and human intimidation.
- Effective protection now depends on integrated, cross-domain intelligence sharing and pre-established coordination, as adversaries increasingly aim not just to cause damage but to erode institutional trust and societal resilience.
The panel “Protecting Critical Infrastructure in a Multi-Domain Threat Environment” addressed how to defend critical infrastructure against an increasingly complex, multi-domain threat landscape.
Read the rest of the analysis here.
Counterterrorism 2026: Cyber and AI in the Terrorism Battlespace
By Kyle Watkins
- AI and cyber tools are lowering the barrier to entry for terrorist activity, enabling individuals and small groups to access capabilities once reserved for states and expanding operational reach and ambiguity.
- A new “cognitive security” domain is emerging, where adversaries target perception and decision-making through information manipulation, psychological influence, and AI-amplified radicalization pathways.
- Interconnected critical systems (finance, healthcare, utilities, data infrastructure) are increasingly vulnerable to cascading disruptions, while AI both enhances counterterrorism analysis and introduces new risks such as bias and reduced analytical flexibility.
The panel “Cyber & AI in the Terrorism Battlespace,” moderated by Dr. Scott J. White, examined how emerging technologies are enabling both terrorist actors and counterterrorism practitioners. Featuring Dr. Tamara Schwartz, a cybersecurity scholar and former U.S. Air Force officer, the discussion focused on artificial intelligence, cyber operations, and cognitive security. As AI tools proliferate and infrastructure becomes increasingly interconnected, barriers to entry for complex attacks are falling. The panel also examined how actors can exploit the democratization of what were once considered state-level resources and vulnerabilities in both cyber and cognitive security.
Read the rest of the analysis here.
Counterterrorism 2026: U.S. Counterterrorism Strategy & Mega-Event Security
By Benjamin Custer
- A published national counterterrorism strategy is seen as essential for aligning priorities, guiding resource allocation, and clearly communicating U.S. intent to allies and adversaries while reducing the risk of politicization.
- The post–October 7th threat environment has become more volatile, marked by the convergence of cyber and physical threats, increased nation-state involvement in plots, and the rise of nihilistic violent extremism.
- Despite advances in AI and cyber tools, human intelligence remains indispensable, especially as threats such as Volt Typhoon and AI-enabled disinformation increase risks to critical infrastructure and decision-making.
The panel discussion focused on counterterrorism strategy and mega-event security. The conversation began with a high-level strategic discussion on the need for a published national counterterrorism strategy to align resources and communicate intent domestically and internationally. The panelists then detailed the current, highly volatile threat landscape, identifying the October 7th Hamas attack as an impetus for a new wave of inspired and directed attacks. They discussed the evolution of threats, including the convergence of cyber and physical terrorism, the role of nation-state actors, and nihilistic violent extremism. The conversation also covered the impact of emerging technologies such as AI, the irreplaceable value of human intelligence, the potential for the politicization of security strategies, and the specific security challenges posed by upcoming mega-events such as the FIFA World Cup and America 250. The panel was moderated by Kristen Kelly Shapiro, a former senior executive with the FBI’s Counterterrorism Division and a current director at Guidehouse. The panelists included Chris Costa, the executive director of the International Spy Museum and a former special assistant to the president for counterterrorism, who provided a strategic perspective from his time at the White House. The other panelist was Dave Scott, a managing director with Ernst & Young and the retired assistant director of counterterrorism for the FBI, who brought expertise in counterterrorism, cyber operations, and the Joint Terrorism Task Force.
