The second quarter of Terrorism Watch 2026 explores the most recent events and developments pertaining to terror-related incidents in Southeast Asia and significant incidents worldwide from April to June 2026.
At the global level, countries such as Pakistan, Nigeria, Somalia, and Syria continue to face persistent terrorism threats due to internal instability and weaknesses in their domestic security structures. In Syria, the ongoing internal conflict, particularly the withdrawal of the Syrian Democratic Forces (SDF), has the potential to further exacerbate security threats not only within the country but also at the global level. In addition, an increase in terrorism-related incidents involving lone wolf actor has been observed since the outbreak of the conflict between the United States and Iran in early March 2026. This conflict has motivated certain individuals and groups to demonstrate support for parties aligned with their ideological beliefs, thereby increasing the risk of self-radicalised and independently conducted terrorist attacks that are difficult to detect during the early stages.
With regard to the current landscape of extremism, radicalism, and terrorism in Southeast Asia, reports indicate that the security threat remains relevant and persistent. In Indonesia, reports of two separate arrests involving individuals linked to the dissemination of extremist ideology demonstrate that the terrorism threat continues to exist despite the dismantling of several militant networks. This situation suggests that unrestricted access to the internet has contributed to the emergence of self-radicalisation, driven by uncontrolled exposure to extremist content through social media, particularly WhatsApp platform. Meanwhile, in the Philippines, terrorist activities remain concentrated in specific areas such as Maguindanao del Sur and Tacloban in the Eastern Visayas region, where they are orchestrated by the Dawlah Islamiyah (DI) terrorist group. Nevertheless, the Philippine security forces have demonstrated effective operational, tactical, and intelligence capabilities by successfully dismantling a weapons manufacturing facility operated by the Dawlah Islamiyah–Maute Group (DI-MG). These developments indicate that although the terrorism threat persists, the overall threat level in the Philippines appears to be declining as a result of sustained pressure and proactive counter-terrorism operations conducted by the country’s security forces.
The use of these social media platforms reflects the evolution of extremist groups’ tactics in targeting the younger generation in a more focused, covert, and difficult-to-detect way. Such progress necessitates a holistic and unified strategy that encompasses every tier of society, including family institutions, educational institutions, and security agencies. It is vital for parents to monitoring their children’s online activities and fostering critical thinking is crucial in preventing the spread of extremist ideologies from taking root from an early stage.
INTRODUCTION
In numerous countries, the second quarter of 2026 has been marked by notable events, as terrorist and militant organisations continue their operations in conflict zones to enhance and reinforce their power.
The following are the highlights of recent terrorism-related occurrences around the world:
a. Iran.
(1) On 8 June 26, Iran’s Ministry of Intelligence successfully dismantled four terrorist cells and apprehended around 19 members in several locations, including Sistan and Baluchistan, Yazd, and Semnan. The operation also led to the fatalities of one security officer and five terrorists. A large cache of firearms and explosive materials was also discovered and seized during the operation.
(2) The operation conducted by Iran’s Ministry of Intelligence, which successfully dismantled four terrorist cells, demonstrates the effectiveness of intelligence operations in detecting and disrupting terrorist networks before they are able to carry out attacks. The arrest of approximately 19 suspects, the killing of five terrorists, and the confiscation of a large cache of firearms and explosive materials are expected to significantly undermine the group’s operational capabilities. The operation reflects the Iranian authorities’ continued commitment to strengthening national security and actively addressing terrorism threats.
b. Turkiye.
(1) On 7 Apr 26, three-armed men opened fire on Turkish security forces outside the Israeli Consulate in Istanbul. Turkish security personnel killed one of the assailants and apprehended the other two. The attack also injured two security personnel. The deceased attacker was identified as Yunus E.S., while the two suspects arrested were identified as Onur C. and Enes C. According to a statement by the Turkish Ministry of Interior, Yunus was reportedly linked to a terrorist group that exploits religion to advance its agenda in Turkiye.
(2) On 13 May 26, Turkish authorities arrested 324 suspects in a nationwide operation targeting the Daesh terrorist group across 47 provinces, including major cities such as Ankara, Istanbul, and Izmir. The operation was conducted in cooperation with the National Intelligence Organisation (MIT). During the operation, the authorities also seized one handgun, four rifles, 122 rounds of ammunition, and financial assets estimated to be worth USD 213,000.
(3) On 17 June 26, the National Intelligence Organisation (MIT) successfully arrested a senior Daesh leader who was attempting to enter Türkiye illegally through a border crossing. The suspect was identified as Ahmet Kazanci @ Abu Ubeyde @ Abu Ibrahim, who was responsible for overseeing the terrorist group’s Turkish-language media operations.
(4) The series of attacks carried out by the Daesh terrorist group may have been intended as a provocation or as a warning to demonstrate that the group remains operational and capable of threatening Turkiye national security. Daesh is also believed to use the local language as part of its propaganda strategy to attract and recruit more individuals by delivering its messaging in a language that is more easily understood by the local. The counter-terrorism operations conducted by the Turkish security forces reflect the government’s strong commitment to disrupting Daesh’s activities and preventing the spread of its extremist ideology within the country
c. India.
(1) On 12 Apr 26, Indian security forces, in cooperation with the Central Intelligence Agency, conducted an operation that resulted in the arrest of several individuals suspected of having links to the Lashkar-e-Taiba (LeT) terrorist group. The suspects were believed to be involved in producing fraudulent identities for terrorists, including forged documents such as passports, national identity cards, and Permanent Account Number (PAN) cards.
(2) On 2 May 26, a 32-year-old man was arrested by Indian security forces in Kutch, Gujarat, for allegedly promoting Daesh extremist ideology through social media. The suspect was identified as Fakirmamad Isha Gagda. Investigations revealed that he operated multiple social media accounts under different aliases and disseminated Daesh propaganda and extremist narratives across various platforms, including Facebook, Instagram, and WhatsApp.
(3) Lashkar-e-Taiba (LeT) is believed to exploit social media platforms to disseminate its extremist ideology. This is reflected in the use of forged identities, including PAN cards, national identity cards, and passports, to conceal the group’s activities and evade detection by security forces. The arrest of individuals involved in producing fraudulent documents for LeT, together with action taken against those disseminating Daesh propaganda through social media, reflects the proactive approach adopted by the Indian authorities to curb support for terrorist organisations. These measures are expected to reduce the operational capability of terrorist groups by disrupting their ability to recruit members, facilitate movement, and expand their influence across India.
d. Pakistan.
(1) On 9 May 26, 14 police officers were killed in an ambush targeting a security checkpoint in Bannu, Khyber Pakhtunkhwa, Pakistan. Ittehad-ul-Mujahideen Pakistan, a splinter group of Tehrik-e-Taliban Pakistan (TTP), claimed responsibility for the attack.
(2) On 24 May 26, the Baloch Liberation Army (BLA) claimed responsibility for a bombing attack targeting a train in Quetta, Balochistan, Pakistan. The attack killed nearly 24 people and left more than 70 others seriously injured.
(3) On 17 June 26, three members of Tehrik-e-Taliban Pakistan (TTP) were confirmed killed during an operation conducted by the Counter Terrorism Department (CTD) of Khyber Pakhtunkhwa in Mardan, Pakistan. The three suspects were identified as Hayat Khan (also known as Hayatullah), Asim, and Aminullah. During the operation, CTD officers also recovered three rifles, hand grenades, and a quantity of ammunition from the scene.
(4) These three significant incidents demonstrate that the terrorism threat in Pakistan remains at a high level, particularly in the southern regions of Khyber Pakhtunkhwa and Balochistan. The Tehrik-e-Taliban Pakistan (TTP) and the Baloch Liberation Army (BLA) continue to demonstrate the capability to carry out high-impact attacks targeting critical infrastructure and soft targets. This suggests that both groups retain operational capability, established logistical networks, and the capacity to recruit members to sustain their terrorist activities. Accordingly, sustained intelligence operations, offensive counter-terrorism measures, and robust security enforcement by Pakistan’s security forces remain essential to degrading these groups’ capabilities and reducing the risk of further attacks. To mitigate the likelihood of similar incidents, Pakistan should strengthen security cooperation and intelligence-sharing with international partners, particularly neighboring countries and strategic allies. Pakistani security forces are also likely to intensify military and intelligence operations in the country’s northwestern regions and along the Pakistan–Afghanistan border to identify terrorist networks and disrupt their logistical support.
e. Syria
(1) On 27 Apr 26, Syrian security forces successfully dismantled a terrorist cell that was planning attacks and attempting to disrupt public security in western Hom’s province. The operation resulted in the death of two members of the terrorist group and the seizure of a large quantity of weapons, including anti-tank missile launchers, sniper rifles, RPG launchers, ammunition, and explosives.
(2) On 22 June 26, Syrian authorities successfully arrested a bomb and weapons manufacturing expert affiliated with the Daesh terrorist group in eastern Syria. The individual was identified as Akram Saleh al-Hamad, also known as Abdo Tasni’a. He was also linked to several attacks targeting Syrian security forces.
(3) On 24 June 26, the US Central Command (CENTCOM) successfully eliminated a senior Daesh leader identified as Ali Husayn al-‘Ulaywi through an airstrike in northwestern Syria.
(4) These security operations represent significant developments in the context of counter-terrorism efforts and the security situation in Syria. The dismantling of terrorist cells, arrests, and elimination of key figures have the potential to disrupt attack planning and weaken operational networks, particularly those linked to Daesh in Syria. Although Daesh has lost most of its territorial control, the threat remains persistent through the presence of sleeper cells, sympathisers, and supporters operating covertly. Therefore, continuous efforts to identify and neutralise key Daesh elements must be maintained to prevent the group’s resurgence and reduce threats to regional security.
f. Mali
(1) On 25 Apr 26, Jama’at Nusrat al-Islam wal-Muslimin (JNIM), Al-Qaeda-linked terrorist group, claimed responsibility for coordinated attacks targeting several major cities in Bamako, Mali. The attacks also involved the Azawad Liberation Front (ALF) separatist group. The Malian Minister of Defence was also killed in the attack.
(2) The coordinated attacks by JNIM, with the support of the Azawad Liberation Front (ALF) separatist group, demonstrate the increasing operational capabilities of terrorist groups in conducting large-scale and well-planned attacks against strategic targets in Mali. The successful takeover of several major cities and the death of the Malian Defence Minister have significant implications for the country’s security situation and political stability. The cooperation between terrorist organisations and local armed groups has the potential to weaken government control and further increase instability across the Sahel region. Therefore, security forces need to implement more aggressive offensive measures to contain the resurgence and expansion of terrorist groups in the region.
g. Nigeria
(1) On 16 May 26, A joint operation conducted by United States and Nigerian security agencies successfully eliminated a senior Daesh leader in the Lake Chad region. The suspect was identified as Abu Bilal Al-Minuki, also known as Abu Mainok. He was reportedly the second-in-command of Daesh at the global level.
(2) On 3 June 26, Nigerian security forces operating under Operation Hadin Kai successfully killed 50 terrorists, including a senior commander of the Islamic State West Africa Province (ISWAP), in Borno, Nigeria. The senior ISWAP commander was identified as Khalifa Umar, who was believed to have played a significant role as a key decision-maker within the group.
(3) On 22 June 26, A total of 11 farmers were killed in two terrorist attacks in Borno State, northeastern Nigeria. The Islamic State West Africa Province (ISWAP) claimed responsibility for the attacks.
(4) Recent developments in Nigeria demonstrate the continued commitment of Nigerian security forces and their international strategic partners in combating terrorism within the country. These incidents indicate that Nigeria continues to face persistent terrorist threats from groups such as Boko Haram and the Islamic State West Africa Province (ISWAP). The attacks also highlight that militant groups continue to maintain significant operational capabilities despite sustained pressure from Nigerian security forces. The latest successes further demonstrate the effectiveness of Nigeria’s offensive approach in disrupting the organisational structures of militant groups operating in the country. Nigerian security forces are expected to continue applying pressure against terrorist organisations to gradually weaken their influence and operational capabilities.
h. Kenya
(1) On 8 Apr 26, an operation conducted by the Directorate of Criminal Investigation (DCI) successfully dismantled an Al-Shabaab terrorist group supply network in Eastleigh, Nairobi, Kenya. Among the items seized were uniforms suspected of being used for impersonation purposes and other related activities.
(2) On 22 June 26, Kenyan Defence Forces (KDF) successfully thwarted an attempted attack by the Al-Shabaab terrorist group targeting a military camp in Central Mandera County, Kenya. The swift response by security forces forced Al-Shabaab militants to withdraw before they could breach the perimeter of the critical security installation.
(3) Recent developments indicate that the threat posed by the Al-Shabaab terrorist group in Kenya is increasing, with military camps becoming targeted objectives for terrorist attacks. The swift actions taken by Kenyan security forces in thwarting the attempted attack on a military camp in Central Mandera have disrupted the group’s logistical support activities while demonstrating the high level of preparedness among security forces. Overall, these efforts are expected to restrict Al-Shabaab’s freedom of movement and reduce its operational capabilities in Kenya, particularly in areas near the Somalia border.
i. Somalia
(1) On 6 Apr 26, Somali security forces conducted an airstrike targeting the Al-Shabaab terrorist group in Baidoa, Somalia. The strike successfully killed 12 terrorist while several others were injured.
(2) On 20 Apr 26, Somali security forces neutralised one terrorist and injured two others during Operation Waabari, which targeted Al-Shabaab’s extortion activities in the Lower Shabelle region. The deceased terrorist was identified as Zakariye, while the two individuals were identified as Xasan Cabdiraxmaan and Geele. Operation Waabari was a joint operation involving security forces and officers from the Criminal Investigation Department (CID).
(3) On 6 May 26, Somali National Army (SNA) conducted a security operation targeting the Al-Shabaab group in Mudug Region. The operation successfully killed 13 Al-Shabaab members and injured two others. The operation was part of three concurrent counter-terrorism operations aimed to disrupt the activities of the terrorist group across the region.
(4) The success of the Somali Intelligence Agency in dismantling Al-Shabaab terrorist networks demonstrates the capability and effectiveness of Somalia’s intelligence and security apparatus. Based on these three incidents, it shows that Somali security forces continue to intensify offensive operations against the Al-Shabaab group across several key regions, including Baidoa, Lower Shabelle, and Mudug. These continued actions reflect the Somali government’s commitment to degrading terrorists operational capabilities and logistical networks.
j. Chad
(1) On 5 May 26, Boko Haram launched an attack against a military post on Barka Tolorom Island, Lake Chad. The attack resulted in the deaths of at least 23 personnel, while 26 others were injured.
(2) This attack demonstrates that the group continues to possess the capability to conduct terrorist act against critical security installations, particularly in the Lake Chad region, which remains difficult to control. The high number of casualties reflects the level of planning and operational capability of the group in exploiting geographical challenges and security vulnerabilities in remote areas. The incident also indicates that Boko Haram continues to maintain a strategy of targeting security assets and personnel to weaken government operational capabilities, while simultaneously affecting the morale of security forces and local communities. In addition, the attack is expected to encourage authorities to strengthen security measures in border areas and enhance operational cooperation among member states of the Multinational Joint Task Force (MNJTF). Measures such as intelligence sharing, joint patrols, and coordinated operations are expected to be intensified to restrict Boko Haram’s movements and reduce the risk of further attacks in the Lake Chad region.
k. United States
(1) On 9 June 26, Manhattan Federal Court, US, sentenced a former Taliban commander to 42 years in prison for charges related to kidnapping and involvement in terrorist activities. Haji Najibullah pleaded guilty to supporting the Taliban terrorist group in its efforts to kill US authorities and kidnapping of a journalist identified as David Rohde.
(2) In the context of ongoing conflicts and rising geopolitical tensions, countries allied with the US are expected to continue facing internal security challenges. These threats do not only emerge in the form of proxy operations but are also compounded by the increasing activities of lone wolf actor who act independently while being influenced by extremist narratives or global geopolitical sentiments.
l. Georgia
(1) On 21 Apr 26, two individuals were arrested by the Georgian authorities on allegations of involvement with the Daesh terrorist group in Batumi, Georgia. One of the suspects was a Georgian national, while the other was a foreign national. They were alleged to have pledged allegiance to Daesh through a video recording that was sent to the group’s leadership. Georgian security forces seized various items of evidence, including electronic data storage devices, unregistered SIM cards, mobile phones, items bearing Daesh symbols, masks, personal documents, and other evidential materials.
(2) The arrest of two individuals suspected of having links to Daesh indicates that the terrorism threat in Georgia extends beyond the potential for physical attacks and also encompasses radicalisation activities and ideological support. The seizure of various items of evidence, including electronic devices, unregistered SIM cards, and Daesh propaganda materials, reflects the authorities’ efforts to identify and dismantle the group’s support networks at an early stage. This proactive approach is expected to reduce the risk of Daesh expanding its influence while strengthening domestic security through enhanced monitoring and preventive counter-terrorism measures.
TERRORISM IN SOUTHEAST ASIA
INDONESIA
On 6 May 26, eight terrorist suspects linked to Jamaah Ansharut Daulah (JAD) were arrested by Densus 88 during an operation in Central Sulawesi, Indonesia. Preliminary investigations revealed that all of the suspects were allegedly involved in disseminating extremist propaganda through social media platforms, while also uploading content promoting radicalism and terrorism.
On 11 May 26, Densus 88 successfully arrested a 31-year-old man suspected of being influenced by the ideology of the Daesh in Padang Lawas Regency, North Sumatra, Indonesia. The suspect, identified by the initials MMH, was a member of a WhatsApp group that supported Daesh and was actively involved in disseminating the group’s propaganda across social media platforms.
The arrests of individuals linked to terrorist activities indicate that the terrorism threat in Indonesia remains present despite the dismantling of several militant networks. These operations are significant in preventing the resurgence of small terrorist cells through recruitment, propaganda, and training conducted by extremist groups within the country. The dissemination of radical content through digital platforms demonstrates that these groups continue to exploit social media as a tool for indoctrination and for sustaining their networks. Consequently, deradicalisation efforts and monitoring of online extremist propaganda should be further strengthened, as extremist groups are increasingly operating covertly and using online platforms to spread their ideology and recruit new members.
THE PHILIPPINES
On 15 Apr 26, Philippine security forces conducted a security operation and successfully raided a firearms manufacturing facility suspected of belonging to the Dawlah Islamiyah–Maute Group (DI-MG) in Marogong, Lanao del Sur. Among the items seized were a milling machine, a welding machine, and other weapons fabrication equipment. Security forces also confiscated 50-calibre barrels, 50-calibre propellant cartridges, three Barrett rifle scopes, and one hand grenade.
On 5 May 26, five members of the Bangsamoro Islamic Freedom Fighters (BIFF) peacefully surrendered to Philippine security forces in Maguindanao del Sur. The individuals were identified as Datu Ali Samat, Morad Datu Ali, Guialudin Samsudin Salipada, Tohami Katu Maguid, and Diya Bakang Dagadas. A number of firearms were also surrendered as a symbolic gesture during the surrender ceremony.
On 23 June 26, Philippine Department of Justice (DOJ) began examining the possibility that nihilistic violent extremism (NVE) played a role in a school shooting incident in Tacloban, which resulted in three fatalities and 20 injuries. The investigation also found that one of the suspects was reportedly addicted to the online game GoreBox, which features graphic violence and the use of firearms.
The raid on the weapons manufacturing facility and the arrests carried out by Philippine security forces represent a significant development in efforts to curb the operational capabilities of militant groups such as Dawlah Islamiyah (DI) and the Bangsamoro Islamic Freedom Fighters (BIFF) in southern Philippines. The seizure of firearms and critical weapons manufacturing equipment is expected to weaken these groups’ long-term ability to rebuild their operational capacity. The surrender of militant members also indicates that soft approaches, including reintegration programmes, rehabilitation initiatives, and community engagement, introduced by the government have produced positive outcomes. However, online radicalisation through social media platforms and online gaming has emerged as a new and evolving security challenge. Terrorism landscape in the Philippines underscores the need for sustained cooperation among all stakeholders to ensure the country’s long-term stability and security.
CONCLUSION
Countries in the regions of Southeast Asia, Asia, Africa, the Americas, and Europe continue to face persistent terrorist threats driven by prolonged internal conflicts and weaknesses in domestic security structures. At the same time, extremist sentiments and hate-based ideologies continue to be exploited by terrorist supporters and sympathisers to gain support and expand their influence within communities. The widespread use of digital platforms and social media has further accelerated the dissemination of these narratives, making them increasingly difficult to monitor. Geopolitical tensions between Iran and the United States have also contributed to broader international instability. This environment creates opportunities for terrorist organisations such as Daesh to exploit these tensions, particularly by manipulating economic grievances and perceptions of injustice among affected populations. In this context, the risk of the resurgence of Foreign Terrorist Fighters (FTFs), as well as the increasing threat posed by lone wolf actors, is expected to continue expanding at both the global and regional levels.
The terrorism threat level in Malaysia remains at a moderate level, with the possibility of attack incidents still existing although without any clear or specific indicators. Nevertheless, as a preventive measure, government continues to strengthen cooperation through platforms such as the Counter Terrorism Information Facility (CTIF) and ASEAN Our Eyes (AOE) to facilitate intelligence coordination and information sharing among security agencies. Through integrated intelligence sharing, the capability to detect and respond to potential terrorist threats at an early stage is significantly enhanced.
Overall, the threat of terrorism at the global and regional levels is expected to persist and continue to pose concerns for countries worldwide. The prevalent adoption of social media in daily life has become a key catalyst for the dissemination of extremist propaganda, increasing the likelihood of lone-wolf actors and making it more difficult for authorities to detect and prevent threats at an early stage. Thus, regional collaboration and intelligence exchange among nations remain crucial to ensure that any form of local threat or activities involving Foreign Terrorist Fighters (FTFs) can be identified and addressed in a comprehensive and coordinated manner.