As of September 2026, the Islamic State remains a resilient and decentralised insurgent actor operating across the Middle East and South Asia, capable of sustaining operational relevance despite a contained overall attack volume.
The organisation continues to operate within a post-territorial insurgent model defined by decentralised cells, localised autonomy, and the selective use of violence. Understanding how this decentralisation affects threat levels in key regions such as Syria, Iraq, Pakistan and Afghanistan, and influences operational coordination, is essential for strategic planning and resource allocation.
📌 Inside this Assessment
Overview
Activity and Operations Analysis — September 2026
Number, Targets, and Areas of Attacks in September 2026
Charts and Statistics
Analytical and Intelligence Assessments
Implications for Decision Makers
Early Warning Indicators
Threat Forecast, 30 to 90 Days
Executive Intelligence Conclusion
Scope and Methodology
This Strategic Threat Outlook is based on:
systematic monitoring of Islamic State propaganda (videos, photos, statements, claims);
reporting from sources in the field;
Integration of OSINT, SOCMINT, IMINT, and Digital HUMINT.
Sources include primary Islamic State media channels, open-source reporting, official statements, and local sources across affected regions.
Limitations
Incomplete or delayed reporting from conflict zones;
Exaggeration or omission in group claims;
Propaganda bias and potential disinformation.
Where verification is not possible, this is explicitly noted. However, incomplete or delayed reporting from conflict zones, propaganda bias, and disinformation may affect the precision of threat assessments and require cautious interpretation of available data.
Provincial Snapshots
Islamic State Sham;
Islamic State of Iraq;
Islamic State Khorasan;
Islamic State Pakistan;
Islamic State East Asia.
Related Intelligence & Analysis:
DestabilisationDestabilisation
Destabilisation
Overview
Entering 2026, the Islamic State should no longer be analysed solely through territorial revival scenarios. While current evidence indicates a focus on survival and network preservation, IS’s potential to reconstitute territorial control or adapt tactics remains a concern that warrants ongoing monitoring and strategic foresight.
The structural features identified in 2025 remain intact. IS continues to operate as a decentralised ecosystem of locally embedded nodes, loosely connected by ideological cohesion and brand identity rather than a rigid command hierarchy. Central leadership functions primarily as a symbolic and narrative anchor, while operational initiative remains provincial and context-driven.
What January 2026 clarifies is not a transformation but a consolidation. The organisation has shown it can sustain a calibrated level of violence across multiple theatres without territorial control, reconstituted governance structures, or large-scale operations. This model is inherently sustainable under conditions of fragmented governance, uneven security-sector capacity, and prolonged socioeconomic stress.
Strategically, Syria remains the core geographic anchor, while Afghanistan, through ISKP, and Pakistan, as a sensitive extension zone, are critical for regional stability. Emphasising these areas underscores the importance of regional efforts, fostering a sense of shared responsibility among decision-makers.
From a strategic standpoint, the most significant conclusion entering 2026 is that IS has achieved operational equilibrium. It is not expanding, but it is not eroding, highlighting the need for continued, focused efforts to manage this persistent threat effectively.
For political and military decision-makers, the implication is clear. At the start of 2026, the Islamic State is not a collapsing remnant, nor an imminent territorial challenger. It remains a persistent insurgent actor embedded within fragile security ecosystems, emphasising the importance of sustained intelligence and capacity-building efforts.
Activity and Operations Analysis — September 2026
Islamic State activity during September unfolded under sustained counterterrorism pressure, with developments in Syria, Iraq and the Afghanistan–Pakistan theatre revealing different relationships between operational disruption and network persistence. The available evidence supports an assessment centred on clandestine infrastructure and selective violence. However, neither the survival of individual cells nor the discovery of attack preparations establishes a broader organisational recovery.
