Frontline Watch provides a weekly update on emerging terrorist activities and global threat trends, with Counterterrorism Managing Editor Dr. Mahmut Cengiz examining the developments shaping the security landscape both domestically and internationally, with research assistance from Sean Dilallo, Brian Cortes, Ayse Selma Yilmaz, Floyd Alex Cross, Mahmoud Khalil, and Chris Dayton.
This edition also features an analytical article examining the growing threat of hate-fueled violence and the lessons it offers for homeland security. In “The Islamic Center of San Diego Shooting: Threats Understood and Lessons Learned,” Dean C. Alexander and Huseyin Cinoglu analyze how online radicalization, conspiracy theories, and extremist ideologies motivated the attack on the Islamic Center of San Diego. The authors argue that such acts of violence are rarely spontaneous but instead emerge from a gradual process of radicalization that often presents warning signs. Emphasizing the need for a whole-of-society approach, they highlight the importance of coordinated efforts among families, communities, online platforms, and security institutions to detect threats early, strengthen resilience, and prevent hate-driven violence before it escalates into tragedy.
The edition also reviews military operations and policy signals related to counterterrorism, as well as notable terrorist attacks recorded from June 20 to June 26.
Counterterrorism Insights
The Islamic Center of San Diego Shooting: Threats Understood and Lessons Learned
by Dean C. Alexander and Huseyin Cinoglu
On May 18, 2026, two male teenagers, Caleb Liam Vazquez, 18, and Cain Lee Clark, 17, attacked the Islamic Center of San Diego (ICSD) in Clairemont Mesa East, San Diego, California, with firearms, killing three members of the ICSD community. Later the pair shot at a landscaper, who was struck on the helmet he was wearing and escaped serious injury. The ICSD houses the lower campus of Bright Horizon Academy, a pre-K through 12 Islamic school. According to the Counter Extremism Project (CEP), there were 140 children inside the facility at the time of the attack. According to the Center for Strategic and International Studies (CSIS), the killings at the ICSD marked the first ideologically motivated lethal mosque attack in the United States this century.
Initially, the attackers exchanged gunfire with the armed security guard outside. Before he was killed, the security guard radioed the lockdown procedures, and the children and staff reached a protected area. The attackers then entered the mosque and went door to door in one area, finding it unoccupied. When the shooters observed two congregant men in the parking lot, they exited the mosque and shot and killed them, then fled in their vehicle.
For more context, the mosque’s armed security guard, Amin Abdullah, was killed at the entrance. His decision to trigger the lockdown before he died meant the children and staff at the school were physically unharmed. Mansour Kaziha, who ran the mosque’s gift shop, was killed in the parking lot. Nadir Awad, who lived across the street from the ICSD and whose wife worked there as a teacher, was killed while running to the complex. Kaziha and Awad confronted the shooters in the parking lot and died doing so. Viewed as heroes and martyrs of the community, these three victims’ actions appear to have prevented further bloodshed. The initial officers arrived four minutes after the first shots-fired call.
Read the rest of the analysis here.
Counterterrorism Snapshot: Operations and Policy Signals (June 20 – June 26)
During the reporting period, counterterrorism efforts focused on disrupting terrorist plots, dismantling militant networks, and targeting leadership across multiple regions. U.S. authorities continued to expand arrests connected to an ISIS-inspired plot targeting a White House event and prosecuted individuals providing material support to ISIS, while Costa Rica detained a suspected Hamas-linked operative. In Somalia, coordinated airstrikes killed dozens of al-Shabaab fighters, and Pakistani security forces intensified operations against TTP and other militant groups through arrests, targeted raids, and large-scale military preparations in Khyber Pakhtunkhwa and Balochistan. These developments underscore sustained international efforts to counter terrorist organizations through intelligence-driven operations, judicial actions, and coordinated military campaigns.
On June 20, 2026 in Salha, Aleppo, Syria ISIS fired on two Syrian Army soldiers with machine guns. Both victims were killed in the attack. This attack was claimed by the perpetrators.
On June 21, 2026, in Karachi, Sindh, Pakistan, Pakistani Security Forces arrested a suicide bomber from the Tehreek-e-Taliban Pakistan (TTP). The suspect reportedly had maps and images of “sensitive sites”.
On June 22, 2026, a U.S. federal judge sentenced Alexander Justin White to 8 years in prison for conspiring to provide and attempting to provide material support to ISIS. White also attempted to fly to North Africa to join ISIS. White was
On June 22, 2026, the U.S. Department of Justice announced the arrests of two more individuals in connection with the plot to attack the UFC event at the White House. One suspect was arrested in Washington state while the other was arrested in Missouri. Both were charged with conspiracy to commit murder.
On June 22, 2026, in Costa Rica, Costa Rican authorities announced the arrest of a Palestinian man who is allegedly linked to Hamas.
Between June 24 and 25, 2026, in the Middle Shabelle Region of Somalia, Somali Intelligence and international partners launched a series of airstrikes that killed 30 al-Shabaab fighters. The strikes also destroyed vehicles, equipment, and ammunition used by the group.
On June 26, 2026, the U.S. Department of Justice announced the arrest of another person in connection with the plot to attack the UFC event at the White House. The suspect, who is from Chicago, was allegedly the administrator of Signal messaging groups that included plot members. The suspect is charged with obstruction of justice.
Over the past week in Bara Teshil, Khyber District, Khyber Pakhtunkhwa, Pakistan, residents have been evacuating their homes in anticipation of large-scale military operations in the area. Security Forces and militants have already been trading artillery fire and drone strikes in the area.
On June 26, 2026, in Mastung District, Balochistan, Pakistan, Pakistani Security Forces conducted a counterterrorism operation, killing five militants, including a suicide bomber. Pakistani forces also seized weapons, explosives, and motorbikes.
On June 26, 2026, in Bannu District, Khyber Pakhtunkhwa, Pakistan, Pakistani Security Forces launched a counterterrorism operation that killed at least seven militants. Pakistani forces also seized explosives and weapons during the operation.
Terrorist Attacks Worldwide (June 20 – June 26)
Between June 20 and June 26, 2026, terrorist and extremist activity continued across multiple regions, highlighting the persistence of both ideological and criminal violence. In North America, authorities investigated an alleged anarchist-linked arson attack in Oregon and a deadly shooting in Canada motivated by incel ideology. Across Africa and Asia, jihadist groups including JNIM, Islamic State Sahel Province (ISSP), the Tehreek-e-Taliban Pakistan (TTP), and the Balochistan Liberation Army (BLA) remained active, conducting attacks on military, police, and critical infrastructure while increasingly employing tactics such as drones, IEDs, and kidnappings. In the Middle East, efforts to counter ISIS financing continued through expanded U.S. sanctions, while Iraqi authorities arrested suspects accused of promoting ISIS ideology. Meanwhile, cartel violence in Mexico remained intense, with mass shootings, targeted assassinations, armed clashes with security forces, and significant arrests of senior CJNG and Sinaloa Cartel figures underscoring the continued convergence of organized crime and national security threats.
United States and Canada
On June 22, 2026, in Portland, Oregon, the United States, four Amazon delivery vans were set on fire. Police have described the incidents as arson. An anonymous claim was posted on a local anarchist blog. However, the veracity of this claim has not been confirmed.
On June 22, 2026, in Montreal, Canada, a gunman opened fire outside the offices of Aylo, killing two people and injuring two more. One of the killed and one of the wounded were police officers. Police later killed the perpetrator. The gunman’s manifesto reportedly talked about incel (involuntary celibate) ideology and the porn industry. Aylo is the parent company of Pornhub.
Africa
On June 26, 2026, in Kalana, Sikasso Region, Mali, Jama’at Nusrat al-Islam wal-Muslimin (JNIM) attacked a military checkpoint, killing two soldiers.
On June 27, 2026, in Saburumowa, Kebbi State, Nigeria, the Nigerian Army killed two suspected Islamic State Sahel Province (ISSP) fighters. The soldiers also recovered several weapons.
Middle East
On June 22, 2026, the United States State Department announced an expansion of its sanctions list, targeting three individuals and six companies for facilitating financial transactions for ISIS.
On June 25, 2026, in Mukalla, Hadramout Governorate, Yemen, unidentified assailants killed Yemeni journalist Mohammed Eida by detonating an explosive device planted in his car. Yemeni authorities launched an investigation into the attack, but no group claimed responsibility.
On June 26, 2026, in Baghdad and Karbala, Iraq, members of the Iraqi National Security Service arrested suspects accused of “promoting ISIS ideology and inciting sectarian tensions” during Ashura celebrations.
Asia
On June 20, 2026, in Bannu District, Khyber Pakhtunkhwa, Pakistan, a pair of IEDs detonated in the same location, killing seven people and injuring three others.
On June 21, 2026, in Surab, Surab District, Balochistan, Pakistan, the Balochistan Liberation Army (BLA) bombed a bridge on the N-25 National Highway. No casualties were reported in the attack. The BLA claimed responsibility for the incident. Baloch groups have increasingly targeted transport infrastructure and other economic targets in the region.
On June 24, 2026, in Upper South Waziristan District, Khyber Pakhtunkhwa, Pakistan, eight police personnel were kidnapped while returning from an operation. The officers were later released the following day. Additionally, on June 25 in Bannu District, five people, including a police officer, were released after being kidnapped by militants in the days prior.
On June 24, 2026, in Bannu District, Khyber Pakhtunkhwa, Pakistan, militants dropped two explosives on a police station using a drone, injuring two police officers. The Tehreek-e-Taliban Pakistan (TTP), along with other militant groups in Khyber Pakhtunkhwa, have increasingly used drones to target Pakistani Security Forces.
Mexico and Latin America
On June 20, 2026, in Guanajuato, Mexico, suspected members of the Cartel Jalisco Nueva Generación (CJNG) carried out two armed attacks that left nine people dead and five injured. The first attack occurred in Puerto Blanco, San Luis de la Paz, where armed individuals opened fire at a beer sales establishment, killing four men and injuring three others. A second attack took place hours later in San Juan de Razos, Salamanca, where gunmen shot at people gathered near a soccer field, killing five, including two adolescents, and injuring two more.
On June 20, 2026, in the colonia Azteca of the municipality of Escuinapa, Sinaloa, Mexico, a suspected Cartel de Sinaloa member shot and killed a 20-year-old woman, identified as Briseida Abigail. According to reports, the attack was a direct assault, prompting the mobilization of security forces and emergency services. Civil Protection personnel arrived at the scene after reports of gunfire to provide medical assistance; however, the victim was pronounced dead at the scene from gunshot wounds. Weeks before the attack, a video circulated on social media showing the victim wearing tactical gear and handling long firearms alongside another individual. After her death was confirmed, the video resurfaced online and went viral, generating widespread reactions and discussion among users in the region.
On June 20, 2026, in Calzada Zavaleta near the colonia Santa Cruz Buenavista in the municipality of Puebla, Puebla, Mexico, suspected members of the Cartel Jalisco Nueva Generación (CJNG) carried out a targeted armed attack on a 33-year-old businessman, Abraham Ruiz Aguilar. According to reports, the victim, originally from Veracruz and owner of the nightclub “Foxies Sport Bar & Men’s Club,” was traveling in a white BMW with license plates from the state of Morelos when he was intercepted near the main entrance to Club Britania by two individuals on a motorcycle. At that moment, the suspects blocked his vehicle and opened fire multiple times. One of the attackers reportedly approached the vehicle and delivered a close-range shot to the head, resulting in his death at the scene.
On June 20, 2026, near the community of El Limón in Yahualica, Jalisco, Mexico, a suspected Sinaloa Cartel-MF faction clashed with Mexican Federal Forces in an armed confrontation. According to reports, military personnel encountered four suspicious white stake-bed trucks equipped with improvised armor while patrolling along the Nochistlan-Yahualica highway. The armed suspects opened fire on the soldiers, prompting federal forces to return fire. The ensuing firefight left one gunman dead and two soldiers wounded. The remaining suspects fled the scene, prompting a pursuit by security forces. No group claimed responsibility.
On June 21, 2026, in the community of Rincón de Zetina, Michoacán, Mexico, members of the Cartel Jalisco Nueva Generación (CJNG) attacked Mexican Federal Forces, triggering an armed confrontation. According to reports, federal security personnel were fired upon by armed cartel operatives while operating in the area. The ensuing firefight led to the arrest of two suspected CJNG gunmen, one of whom was wounded in the exchange. Authorities seized a significant cache of weapons and tactical equipment, including two 7.62x39mm assault rifles (AK-47 type), 22 rifle magazines, 555 rounds of ammunition in various calibers, and a tactical vest bearing CJNG insignia.
On June 23, 2026, in the Guayabitos neighborhood of San Pedro Tlaquepaque, Jalisco, Mexico, suspected members of the Cartel Jalisco Nueva Generación (CJNG) opened fire on two men, killing one at the scene and wounding the other. According to reports, residents alerted authorities after hearing at least eight gunshots near the intersection of Avenida Cuyucuata and Calle 1 de Enero. Mexican Army personnel passing through the area responded and secured the scene after confirming that both victims had been shot.
On June 24, 2026, near Morelia, Michoacán, Mexico, Mexican federal and state authorities arrested Alfredo, alias ”Sierra 2,” the alleged second-in-command of the Cartel de Altozano, a criminal group linked to the Cartel Jalisco Nueva Generación (CJNG). According to authorities, the arrest occurred just hours after the capture of Ernesto Rafael, alias ”Sierra 1,” the alleged leader of the organization. Investigators reportedly used intelligence obtained following Sierra 1’s arrest to locate Sierra 2 as he allegedly attempted to flee along the Siglo XXI Highway. Officials also detained a woman accompanying him during the operation. Authorities seized an M4-style 5.56 mm rifle, ammunition, a vehicle with altered identification numbers, and approximately 27 grams of a substance believed to be methamphetamine. The operation was conducted as part of efforts to disrupt the group’s command structure and prevent it from reorganizing in the Morelia region.
On June 26, 2026, in Escuinapa, Sinaloa, Mexico, Mexican military and security forces arrested Misael “N,” alias ”Guero Pin,” an alleged regional leader of Los Chapitos, a faction of the Sinaloa Cartel. According to authorities, Misael “N” was identified as the head of a criminal cell operating in southern Sinaloa and was under investigation for alleged involvement in kidnappings and homicides in the state. During the operation, authorities also arrested Hilario “N,” former Director of Public Security and Municipal Transit in Escuinapa. Security forces seized assault rifles, magazines, ammunition, tactical equipment, and suspected narcotics. The arrests were carried out jointly by the Mexican Army, the National Guard, and Sinaloa state security forces as part of ongoing operations against organized crime.
