Frontline Watch provides a weekly update on emerging terrorist activities and global threat trends, with Counterterrorism Managing Editor Dr. Mahmut Cengiz examining the developments shaping the security landscape both domestically and internationally, with research assistance from Sean Dilallo, Brian Cortes, Ayse Selma Yilmaz, Floyd Alex Cross, Mahmoud Khalil, and Chris Dayton.
This edition features an analytical article examining the devastating impact of conflict and governance failures on public health systems. In “The Taliban, ISIS-K, and the Destruction of Healthcare in Afghanistan,” Melissa Skoog explores the catastrophic collapse of Afghanistan’s healthcare sector in the years surrounding the Taliban’s return to power. Drawing on data from the Global Terrorism Trends and Analysis Center (GTTAC), the article identifies 42 healthcare-related incidents between January 2018 and December 2022 and argues that incident counts alone fail to capture the true extent of the crisis. Skoog demonstrates how the systematic exclusion of female healthcare workers, bans on women’s medical education, the expulsion of international NGOs, and the erosion of governance capacity have undermined the country’s ability to provide essential medical services.
The edition also reviews military operations and policy signals related to counterterrorism, as well as notable terrorist attacks recorded from June 6 to June 12.
Counterterrorism Insights
The Taliban as Non-State Actor: Sustained Low-Casualty Targeting
By Melissa Skoog
Afghanistan’s healthcare system is in catastrophic collapse. Between January 2018 and December 2022, GTTAC records 42 incidents targeting or associated with healthcare in Afghanistan, yet by incident count alone, the period since the Taliban assumed governing authority in August 2021 appears safer than the preceding years of active conflict. It is not. Maternal mortality is rising. Female healthcare workers have been systematically removed from the workforce. Medical training for women has been banned. International NGOs have been expelled. Nearly half the population requires humanitarian assistance. The incident analysis in this paper draws on GTTAC records identified through keyword searches across healthcare-related terms, capturing a broader set of healthcare-associated incidents than facility-specific filters alone would produce. This reflects the analytical judgment that healthcare destruction encompasses attacks on personnel, programs, supply infrastructure, and governance capacity, not only physical facilities.
This case study examines the destruction of healthcare in Afghanistan through the lens of two actors whose relationships to that destruction are fundamentally different. The Taliban, who operated as a non-state insurgent before August 2021 and as a de facto governing authority after, expressed the same underlying ideology through different mechanisms: kinetic attacks on internationally-funded health programs and Western-associated health infrastructure as insurgents, and systematic policy destruction of the same targets as governing authority. ISIS-K, a non-state actor whose sporadic high-casualty attacks used healthcare-associated venues as symbolic targets rather than conducting a campaign against healthcare as a system, reveals a different logic of political violence entirely. The contrast between them, sustained ideological destruction versus high-impact symbolic violence, is the analytical subject of this paper. This contrast is visible across every dimension of the dataset: in casualty scale, geography, method, and in each group’s relationship to the healthcare system itself.
Read the rest of the analysis here.
Counterterrorism Snapshot: Operations and Policy Signals (June 6 – June 12)
Hezbollah has increasingly relied on thermal fiber-optic drones in its counteroffensive operations against the IDF in southern Lebanon. These first-person view (FPV) drones operate via dual-use fiber-optic cables. The advantage of these drones is that they are low-cost, tactical platforms that Ukraine first introduced to modern warfare in the early stages of the 2022 Russo-Ukrainian war as an affordable, improvised alternative to offensive military-grade Unmanned Combat Aerial Vehicles (UCAVs). The group’s relative success using these improvised drones against IDF targets in northern Israel and later in southern Lebanon, including an attack last month that wounded 10 IDF soldiers, prompted Israeli military and security leaders to scramble to develop and procure modern interceptor systems aimed at detecting and intercepting these low-tech, maneuverable drones, which can evade electronic jamming and traditional interceptor systems.
The accessibility of these drones to a largely battered and degraded group such as Hezbollah is just one example of the broader recurring theme of emerging counterterrorism challenges, in which non-state actors with limited capabilities gain asymmetric advantages over more modern, formidable militaries in low-intensity armed conflicts. Counterterrorism experts will likely continue to raise the issue of terrorist groups’ access to low-cost new technologies, such as crypto-based financial systems, cyber-attacks, and commercial drones that can be reverse-engineered for offensive purposes. But the main takeaway from the recent Hezbollah attacks is that modern terrorist threats demand more innovative counterterrorism solutions, as traditional military operations will not always be able to solve them.
On June 8, 2026, the United States sentenced Taliban commander Najibullah Naim to 42 years in prison for hostage taking and providing material support for acts of terrorism resulting in death. The charges relate to the kidnapping of an American journalist and two Afghan civilians in 2008, and attacks carried out against U.S. forces during Operation Enduring Freedom (OEF). Najibullah was a Taliban commander in Wardak Province, Afghanistan, from 2007 to 2009.
On June 8, 2026, the U.S. Department of Justice (DoJ) charged a 22-year-old male with attempting to provide material support to ISIS. The defendant expressed a desire to carry out attacks in the United States and attempted to travel to ISIS territory in March, 2026.
On June 9, 2026, in Jambaluul, Lower Shabelle Region, Somalia, Somali Intelligence and its international partners killed a senior al-Shabaab commander in a targeted airstrike.
On June 9, 2026, in Belgium, seven suspects were convicted of financially supporting ISIS via cryptocurrency. The network was involved in financing the release of foreign fighters detained in Syria and in procuring weapons. Their procurement efforts included acquiring CBRN-E precursors (chemical, biological, radiological, nuclear, and explosive).
On the night of June 8-9, Kyrgyzstan’s State Committee for National Security (GKNB) detained 21 suspected members of Katibat al-Tawhid wal-Jihad and Islamic State during counterterrorism operations in the Osh and Batken regions. Katibat al-Tawhid wal-Jihad is an Al-Qaeda-linked group composed of Central Asian fighters that fought in Syria. The group carried out a suicide bombing targeting the Chinese Embassy in Kyrgyzstan in 2016.
On June 10, 2026, in Metele, Borno State, Nigeria, the Nigerian Air Force conducted airstrikes on Islamic State West Africa Province (ISWAP) hideouts.
On June 12, 2026, in Venezuela, U.S. President Donald Trump announced that the United States carried out a drone strike, killing the leader of Tren de Aragua, Héctor Rusthenford Guerrero Flores. The strike reportedly occurred earlier in the week.
Terrorist Attacks Worldwide (June 6 – June 12)
Between June 6 and June 12, 2026, global terrorist and extremist activity reflected a combination of ongoing militant attacks, counterterrorism operations, and organized crime violence across multiple regions. In North America, U.S. authorities continued efforts against both jihadist and transnational criminal threats through the sentencing of a Taliban commander, charges against an ISIS supporter, and the reported killing of Tren de Aragua leader Héctor Guerrero Flores. Across Africa and Asia, groups including ISWAP, al-Shabaab, ISCAP, and Tehreek-e-Taliban Pakistan (TTP) remained active, targeting military and civilian sites despite several attacks being repelled by security forces. The Middle East witnessed persistent instability marked by sectarian violence in Syria, Houthi missile attacks against Israel, and renewed clashes in Yemen, while Europe experienced a targeted arson attack against an Imam amid heightened tensions surrounding migration. In Mexico and Latin America, cartel-related violence and security operations underscored the continued influence of transnational criminal organizations, with high-profile arrests, leadership losses, kidnappings, and acts of extreme brutality illustrating the intensity of competition among rival groups and the evolving convergence of organized crime and security threats.
Europe
On June 10, 2026, in Bolton, the United Kingdom, an individual carried out an arson attack on the home of an Imam. Police have described the incident as a targeted attack. No casualties were reported in the attack. The firebombing follows the outbreak of violent anti-migrant riots in Northern Ireland, following a stabbing by a Sudanese national who claimed asylum.
Africa
On June 9, 2026, in Buni Yadi, Yobe State, Nigeria, Islamic State West Africa Province (ISWAP) attacked a Nigerian army camp, but were repelled.
On June 11, 2026, in Lafey, Mandera County, Kenya, al-Shabaab attacked Kenyan Defense Forces camp, but were repelled.
On June 12, 2026, in Kididiwe, North Kivu, Democratic Republic of the Congo, Islamic State Central Africa Province (ISCAP) killed 5 civilians.
Middle East
On June 7, 2026, in Central Israel, an Arab-Israeli gunman went on a shooting spree targeting civilians near a gas station and a security post, killing one civil defense squad member and wounding five, including civilians, before he was shot dead.
On June 8, 2026, in al-Shuhaib village, Hama, Syria, unknown attackers on motorcycles shot at Alawite civilians at their place of work. Two victims were killed, and two were severely injured. The gunmen then set fire to agricultural land and infrastructure in the same village. This occurred amid a surge in hate speech and attacks targeting Syria’s Alawite minority.
On June 8, 2026, the Houthis launched at least two missiles from Yemen targeting Central Israel and the Tel Aviv area. A missile fragment also landed within the West Bank, with no casualties being reported from the attack. This comes a day after Iran targeted Israel with a barrage of missiles for the first time since a ceasefire deal was reached between the two countries back in April.
On June 9, 2026, in Hodeidah, Yemen, the Houthis launched several coordinated attacks against Yemeni armed forces positions, which were repelled by the Yemeni forces after inflicting casualties among the attackers.
Asia
On June 8, 2026, in Peshawar, Khyber Pakhtunkhwa, Pakistan, the Tehreek-e-Taliban Pakistan (TTP) attacked a Frontier Constabulary (FC) post, killing at least six FC members and injuring four more. Additionally, eight FC personnel are still missing following the attack. The TTP claimed responsibility for the attack.
On June 10, 2026, in Karak District, Khyber Pakhtunkhwa, Pakistan, militants ambushed a police patrol, injuring eight officers. Pakistani Security Forces stated that they killed multiple militants in response to the attack.
On June 10, 2026, Pakistan launched a series of airstrikes in Afghanistan’s Khost, Kunar, and Paktika provinces. The Pakistani government stated that the attacks targeted hideouts and infrastructure used by Tehreek-e-Taliban Pakistan (TTP).
Mexico and Latin America
On June 8, 2026, in Hermosillo, Sonora, Mexico, Sinaloa Cartel–Los Salazar Hugo Guerrero Encinas a senior cartel leader was arrested. During a joint security operation, authorities detained Hugo “N,” also known as “El 01, or Pata de Palo” who was identified as an alleged plaza boss for Los Salazar operating in Sonora and Chihuahua. According to reports, Hugo “N” has been linked to attacks involving explosive-equipped drones used against rival criminal groups. During the operation, authorities seized a firearm designated for the exclusive use of the Mexican military. The suspect was taken into custody and transferred to the appropriate authorities for further investigation. The arrest is considered a significant blow to the Los Salazar faction’s operations in northern Mexico.
On June 10, 2026, near Punta Colonet in the municipality of Ensenada, Baja California, Mexico, suspected Cartel Jalisco Nueva Generación (CJNG) members abducted two inspectors from the Institute of Sustainable Mobility (IMOS) during a targeted attack on a government vehicle. According to reports, Erik Zertuche López, 34, and José Héctor Olivero Carabita, 46, were returning to Ensenada after completing a traffic inspection operation in San Quintín. At approximately 2100 hours, their official vehicle was intercepted by an estimated 15 armed and masked individuals traveling in three vehicles. The suspects forcibly removed both officials and fled the area. Zertuche López is the son of federal deputy Rocío López Gorosave
On June 11, 2026, near the community of Charay in the municipality of El Fuerte, Sinaloa, Mexico, Sinaloa Cartel–Chapitos faction member Jesús Omar Ibarra Félix, also known as “El Chuta,” was found dead alongside the Los Mochis–Choix state highway. Authorities from multiple levels of government responded to reports of a body abandoned near the roadway and subsequently identified the victim as Ibarra Félix. According to reports, his killing may be linked to the alleged betrayal of the criminal organization led by Fausto Isidro Meza Flores (“Chapo Isidro”). Mexican authorities also noted that Ibarra Félix had recently been indicted by a U.S. federal grand jury on charges related to drug trafficking, firearms offenses, and providing support to a transnational criminal organization.
On June 11, 2026, in San Luis Río Colorado, Sonora, Mexico, Mexican Navy (SEMAR) personnel killed Marco Antonio Valenzuela, also known as “El Cabezón,” an alleged leader of Los Rusos, a criminal faction affiliated with the Sinaloa Cartel–Mayo Zambada (MF) faction, during a pursuit operation. According to reports, Valenzuela was traveling in a white 2022 Jeep Mojave when SEMAR personnel attempted to stop him near the intersection of Álvaro Obregón Avenue and 12th Street. Valenzuela allegedly ignored commands to stop and fled, prompting a vehicle pursuit that ended in an armed confrontation. Authorities identified Valenzuela as a senior figure within Los Rusos, which operates primarily in Sonora and Baja California. His death is considered a significant setback for the organization and may affect its operations and leadership structure in northwestern Mexico.
On June 12, 2026, in Las Claritas, a mining hub in southeastern Venezuela’s Bolívar State, reports emerged alleging that a U.S. Southern Command operation targeted and killed Héctor Rusthenford Guerrero Flores, also known as “Niño Guerrero,” the alleged leader of the transnational criminal organization Tren de Aragua (TdA). According to a statement attributed to the U.S. president on Truth Social, the operation was described as a “swift and lethal kinetic strike” and was reportedly conducted in close coordination with the Venezuelan government. The statement claimed that the mission successfully eliminated Guerrero Flores, who has been identified by U.S. authorities as a senior TdA leader. If confirmed, the operation would represent a significant development in efforts to disrupt Tren de Aragua’s leadership structure and would highlight an apparent shift in U.S.-Venezuela security cooperation.
On June 12, 2026, in Tarímbaro, Michoacán, Mexico, suspected Cartel Jalisco Nueva Generacion members were involved in an incident in which the severed head of an unidentified female was discovered in the downtown area of the municipal seat. The incident prompted a significant response from local, state, and federal authorities. According to reports, the human remains were located during the early morning hours in a public area of central Tarímbaro. Alongside the remains, perpetrators left a handwritten message containing threats directed at a rival criminal organization. The public display of human remains, and the use of threatening messages are tactics commonly employed by organized criminal groups to intimidate rivals and project control over contested territory.
