Iran is facing its most serious unrest in years, driven by economic collapse conditions and rapidly evolving into explicit anti-regime mobilization. Reporting indicates the regime has pushed a near-total internet/telecom shutdown across large areas while security forces escalate with mass arrests and lethal force.

ThreatWire bottom line: The blackout is not a side effect. It’s the weapon. It isolates organizers, fragments coordination, suppresses evidence of state violence, and lets Tehran run a controlled narrative while it clears streets with force.

📡 CONTEXT — WHAT’S CONFIRMED VS. WHAT’S CLAIMED

What is strongly supported by mainstream reporting

• Iran’s leadership is confronting major unrest described as the worst in recent years, initially tied to economic grievances, now colliding with broader anti-regime sentiment.

• Authorities have responded with force (tear gas in some accounts; live fire allegations in others) and mass detentions, alongside an internet shutdown that has persisted for days in reporting.

What remains contested / not cleanly verifiable in public reporting yet

• Exact spread metrics like “all 31 provinces” or “190–500+ localities.” Those figures are plausible in scale-talk, but should not be treated as confirmed unless anchored to a named dataset or a major outlet’s methodology.

• Casualty totals: early counts vary widely and will remain disputed while comms are degraded. Reuters reporting has cited at least 17 killed in a week per rights groups in one earlier snapshot, while other claims go far beyond that without transparent sourcing.

Get Full Intel Access

⚠️ THREAT PROFILE — WHY “GOING DARK” CHANGES EVERYTHING

1) Regime survival posture: this is counterinsurgency, not policing

When a government cuts comms and answers crowds with lethal force, it’s not “crowd control.” It’s a survival operation aimed at:

• breaking coordination

• preventing viral documentation

• forcing organizers into isolated, high-risk movement

• creating fear-based compliance

Reuters reporting specifically frames the shutdown and repression dynamics as part of state efforts to contain severe unrest.

2) Information warfare: blackout enables narrative domination

A blackout produces three operational advantages for Tehran:

• Evidence suppression: fewer videos, slower verification, fewer witnesses

• Attribution fog: rumors metastasize; adversaries and opportunists exploit it

• Deterrence theater: the regime can punish “offline” while the world argues online

Connectivity reporting describes steep drops consistent with a deliberate shutdown posture.

3) External pivot risk: when cornered, IRGC doctrine looks outward

When regimes feel existential pressure, they often seek to:

• externalize crisis (“foreign agent” narrative)

• activate proxies for distraction or deterrence

• trigger cyber or intimidation activity abroad

This is not a prediction of a specific attack. It’s doctrine-based pattern recognition in high-stress regime environments.

🛰️ WHAT TO WATCH — DEFENSIVE INDICATORS (NON-SPECULATIVE)

Signs the regime is shifting from suppression to “managed stabilization”

• partial, selective restoration of internet in specific districts/cities (controlled narrative phase)

• intensified “foreign agent / terror” accusations in state media (pretext for harsher sentencing)

• banking/payment disruptions and fuel rationing announcements (economic control levers)

Signs of escalation or fracture

• credible reporting of security defections or localized “stand down” behavior

• spikes in executions / expedited trials language

• increased IRGC posture language about “retaliation” or “outside interference”

🛠️ RESPONSE PACKAGE — PRACTICAL, LAWFUL, AMERICA-FACING

For diaspora organizers (U.S. / allied countries)

• harden events like you would any politically charged rally: perimeter discipline, vehicle approach awareness, medical readiness, and comms plans

• reduce public posting of routes/staging/meetups in real time (don’t help hostile surveillance)

For businesses and institutions

• anticipate opportunistic cyber activity and fraud attempts during high-profile unrest cycles; tighten access controls and incident response posture

For individuals

• assume market shock volatility and travel disruption ripple effects; keep basic contingencies tight (communications, cash buffer, fuel, plans)

Upgrade to GUARDIAN

✅ SDN ANALYSIS — JON WHEATON

When a regime cuts the internet and answers chants with force, it’s signaling one thing: it believes it can’t survive transparency. This is the Islamic Republic’s control model—surveillance, intimidation, and narrative domination—scaled to a national emergency.

Watch the pivot points: selective comms restoration, propaganda that blames “foreign agents,” and any outward proxy/cyber pressure designed to change the subject. Blackouts at home often precede pressure abroad.

Godspeed

Jon Wheaton

Somalia held the rotating presidency of the UN Security Council in early January 2026, with Somalia’s ambassador (Abukar Dahir Osman) serving as Council President during that month’s agenda-setting window.

A viral allegation—amplified by partisan outlets and social media—claims the U.S. Department of Health and Human Services (HHS) confirmed a link between Osman and an Ohio healthcare company convicted of Medicaid fraud, and that an associated provider identifier appears on the HHS OIG exclusion list under a conviction-based mandatory exclusion category.

If that allegation is substantiated with primary documents, it’s not a gossip story. It’s legitimacy laundering at the highest level: a fraud-adjacent actor sitting on the chokepoint body for sanctions, mandates, and global security narratives. If it’s not substantiated, it’s still a warning: information operations are now routinely wrapped in “intel packet” language to manufacture certainty without receipts.

📌 WHAT WE CAN CONFIRM (HARD FACTS)

1) Somalia’s UNSC presidency in January 2026 is real

Multiple reports describe Somalia taking the rotating presidency, including coverage naming Ambassador Abukar Dahir Osman as Council President and outlining his stated priorities.

2) OIG “mandatory exclusion” categories exist—and carry a five-year minimum

Under the Social Security Act’s exclusion authorities (Section 1128), certain convictions trigger mandatory exclusion from Medicare/Medicaid for at least five years.
That’s the rule framework the viral claim is referencing—whether or not it’s correctly applied to the individual case.

🔎 WHAT REMAINS ALLEGED (NOT CONFIRMED AS FACT)

These claims are circulating, but should be treated as allegations until you can point to primary records (LEIE entry, court disposition, corporate documents, or an on-the-record agency statement):

• That HHS “verified” Osman’s involvement with a specific Ohio Medicaid-fraud–convicted healthcare company.

• That a specific NPI/provider identifier tied to that company is on the HHS OIG exclusion list under a conviction-based code.

Important: I have not seen a publicly linked primary-source packet (LEIE entry screenshot with matching fields, court docket/case number, ownership documents tying the diplomat to the entity) inside the materials you pasted. Your draft is directionally plausible as a risk narrative, but it’s not yet an evidentiary narrative.

Get Full Intel Access

✅ VERIFICATION CHECKLIST (HOW TO “LOCK” THIS)

If you want this post to survive scrutiny, you need a clean, reproducible chain:

A) Confirm the UNSC presidency + identity (easy)

• UN monthly presidency documentation or credible reporting naming the Council President (Somalia / Abukar Dahir Osman).

B) Confirm the alleged exclusion entry (critical)

• Pull the HHS OIG LEIE record for the named party/entity and capture:

  • exact name matching fields

  • exclusion authority

  • effective date

  • reinstatement status criteria

• Then tie the LEIE record to the exact entity alleged in the claim (ownership/officer linkage).

(Background on exclusions / LEIE framework is on OIG’s site; minimum period language is in the SSA Act.)

C) Confirm the Medicaid fraud conviction (critical)

• Locate the court disposition (state/federal), case number, and conviction type.

• Confirm that the entity was convicted (not merely investigated, alleged, or settled).

D) Tie the diplomat to the entity (make-or-break)

• Corporate filings (Ohio Secretary of State), beneficial ownership, officers, incorporator history.

• Any documentation of operational control, not just “involved with” language.

E) Only then discuss “terror-finance” adjacency

• Without transaction tracing, you describe risk, not downstream funding.

⚠️ THREAT PROFILE (IF THE CORE CLAIM IS VERIFIED)

If the receipts show a real, documented link between a conviction-based exclusion category and a sitting high-level diplomat:

1) Legitimacy laundering as a force multiplier

Fraud ecosystems don’t stop at money. They evolve into access—boards, NGOs, diplomacy, “humanitarian” cover. That’s how compromised actors turn criminal proceeds into institutional leverage.

2) Agenda control + oversight degradation risk

The UNSC presidency doesn’t “rule the world,” but it sets tempo: agendas, messaging, procedural emphasis, and what gets oxygen. When corruption touches that layer, oversight language is often the first casualty.

3) Aid and procurement vulnerability

Where corruption and diplomacy overlap, the common downstream is:

• vendor capture

• opaque subcontracting

• “humanitarian” laundering narratives

• compliance fatigue (“stop asking questions”)

4) Counterterror second-order exposure

Somalia is a live counterterror theater. Any weakening of sanctions rigor, audit posture, or narrative clarity becomes operationally relevant in the Horn of Africa.

🛰️ WHAT TO WATCH (OPERATIONAL INDICATORS)

• Procedural slow-walks or “process arguments” around Somalia/Horn of Africa sanctions language.

• New NGOs/contractors orbiting Somalia-linked UN efforts with thin transparency.

• Messaging that aggressively reframes fraud scrutiny as “bias,” intended to chill investigators.

• Sudden “humanitarian urgency” pushes paired with reduced audit/oversight requirements.

🛠️ RESPONSE PACKAGE (MAXIMUM LAWFUL PRESSURE, RECEIPTS-FIRST)

1) Document demand, not vibes

• FOIA where applicable; congressional inquiries; inspector general referrals.

• Publish the timeline: presidency date, alleged HHS confirmation date, exclusion effective date, conviction date.

2) Compliance hardening (public + private sector)

• Any org touching UN/Somalia program spend should apply:

  • enhanced vendor vetting

  • beneficial ownership checks

  • exclusion screening and re-screening

  • documented conflict-of-interest controls

3) If substantiated: escalate consequences

• Formal ethics challenges, credential review pressure, and allied-state scrutiny of procurement/aid pathways.

• Where U.S. funds intersect: mandatory compliance reviews and suspension triggers.

Upgrade to GUARDIAN

🧭 SDN ANALYSIS — JON WHEATON

This is the broader pattern whether this specific allegation holds or not: fraud ecosystems metastasize into influence ecosystems. The playbook is consistent—steal, scale, sanitize, then wield access.

But ThreatWire doesn’t run on outrage. It runs on receipts. The UNSC presidency timing is confirmable. The exclusion regime and five-year minimum framework are real. The specific linkage to Medicaid fraud and an OIG exclusion entry must be locked with primary-source documentation before you present it as established fact.

Push audits. Push timelines. Push documentation. If the documents land, then escalate—hard.

Godspeed

Jon Wheaton

Nicolás Maduro has appeared in U.S. federal court in New York after being taken into U.S. custody, where he pleaded not guilty to U.S. charges. Maduro’s legal team describes the operation as a kidnapping, while U.S. officials frame the case as long-running state-enabled trafficking and “narco-terrorism” allegations tied to armed partners and illicit finance corridors.

In Venezuela, Reuters reports Delcy Rodríguez was sworn in as interim leader on January 5, 2026, signaling an immediate regime-continuity attempt as Caracas manages legitimacy, stability, and retaliation narratives.

ThreatWire bottom line: this is not only a courtroom story—this is a disruption event in a narco-state ecosystem, with predictable blowback risk in illicit finance, proxy activity, and infrastructure targeting.

📡 CONFIRMED CONTEXT (WHAT WE CAN SAY CLEANLY)

1) U.S. court posture

• Reuters reporting indicates Maduro appeared in New York federal court and pleaded not guilty, while disputing the legitimacy of the capture and characterizing it as abduction.

2) Venezuela succession move

• Reuters reports Delcy Rodríguez was sworn in as interim leader on January 5, 2026, after Maduro’s removal and U.S. court appearance.

3) The U.S. “narco-terror” frame is not new

• The U.S. Department of Justice has publicly alleged (since at least 2020) that Maduro and senior figures partnered with the FARC and leveraged cocaine trafficking as a strategic weapon against the United States—this is the backbone narrative powering the “narco-terrorism” label.

Get Full Intel Access

⚠️ THREAT PROFILE (WHAT THIS OPENS UP)

1) Narco-terror convergence (state protection as force multiplier)

When a regime functions as route protection + documentation + port/airfield access + corrupt law enforcement, it becomes a platform for transnational criminal organizations (TCOs) and aligned armed actors. Disrupting leadership doesn’t automatically shut that platform down—it often fractures it and spreads it.

Operational expectation: splintering loyalty networks, rapid asset flight, and “continuity of business” through proxies.

2) Illicit finance surge (the “cash-out” phase)

High-risk transition periods trigger predictable moves:

• gold/cash movement

• shell company churn

• crypto laundering attempts

• MSB/remittance spikes

• sanctions evasion accelerations

3) Terror-finance adjacency (not speculative as a model—proven as a playbook)

The Western Hemisphere has repeatedly shown compatibility between organized crime logistics and terror finance methods—especially Hezbollah-linked networks operating in Latin America’s commercial corridors. For example, U.S. Treasury actions have targeted Lebanon–South America networks accused of financing Hezbollah, including business structures spanning the region.

ThreatWire note: you do not need ideological alignment for cooperation—you only need mutually beneficial laundering rails.

4) Retaliatory messaging + proxy action risk

Regime-linked actors and sympathizers will push three lines simultaneously:

• “kidnapping/illegal coup” messaging (delegitimization)

• “U.S. imperialism” mobilization (street pressure)

• threat signaling (selective targeting or harassment of U.S.-linked interests)

Reuters reporting already reflects the contested narrative environment surrounding the capture and legality claims.

🛰️ WHAT TO WATCH (DEFENSIVE INDICATORS)

Financial / Logistics

• sudden corporate ownership changes in Venezuela- or LATAM-linked entities

• unusual remittance patterns / repeated recipients / structured transactions

• spikes in gold exports, cash couriers, or “consulting” invoices with no real services

Security

• threats or suspicious surveillance near ports, refineries, pipelines, airports, shipping terminals

• short-notice protests targeting U.S.-linked businesses, consulates, energy assets

• diaspora community intimidation, coercion, or extortion attempts (classic pressure tool)

Information domain

• rapid spread of “false flag” claims, fabricated evidence drops, or “leaked” documents meant to muddy attribution and trigger overreaction

🛠️ RESPONSE PACKAGE (MAXIMUM LAWFUL PRESSURE)

1) Follow-the-money campaign

• rapid asset tracing + freezes on logistics enablers and front companies

• prioritize port/aviation facilitators, corrupt procurement networks, and “document service” pipelines

2) Infrastructure hardening

• elevate posture at energy, port, and transport nodes (access control, contractor verification, surveillance detection routes)

3) Counter–illicit finance coordination

• surge FinCEN + Treasury + DHS focus on high-risk corridors and known typologies (trade-based laundering, gold, shell churn)

4) Community readiness

• for businesses with LATAM exposure: tighten vendor onboarding, dual-control payments, and unusual invoice screening

• encourage disciplined “see something / say something” reporting for surveillance indicators—especially around critical infrastructure

Upgrade to GUARDIAN

✅ SDN ANALYSIS — JON WHEATON (VOICE & FRAMING)

This is war-economy terrain: drugs, corruption, proxy networks, and influence operations. The capture of a head-of-regime figure is a catalyst event—but the real fight is what happens to the infrastructure underneath: the ports, papers, money rails, and armed protection that make trafficking scalable.

The winning move is not commentary. It’s relentless interdiction: identify the facilitators, seize the assets, choke the corridors, and keep pressure on the node network until the platform stops functioning.

Godspeed

Jon Wheaton

A viral clip claims millions of non-citizens were issued Social Security Numbers (SSNs), routed into programs like Medicaid, registered to vote, and that sampling shows some voted, with referrals made for prosecution. The chart often cited shows a rise from roughly 270,000 (2021) to about 2.1 million (2024) “non-citizens getting Social Security n…

Read more

A viral report claims a 17-year-old Christian girl (“Hannah”) was kidnapped in Pakistan after refusing conversion and a forced marriage. At this time, treat that specific “Hannah” claim as unverified until it appears in credible reporting or official documentation.

But the pattern is real and repeatedly documented: minority girls—especially Christian and Hindu—have faced abduction, coercion, forced “conversion,” and forced/child marriage, followed by intimidation and “consent” narratives inside the legal process. UN experts and international reporting have raised repeated alarms about coercion, impunity, and the difficulty families face when trying to seek justice.

ThreatWire’s bottom line: this isn’t merely “crime.” It’s a social-control model that rewards predation, shields perpetrators, and punishes resistance. Where that model is tolerated, it becomes a broader intimidation-export risk anywhere its networks are protected from scrutiny.

📡 CONTEXT — WHAT’S VERIFIED VS. DEVELOPING

Developing :

• “Hannah” case details circulating on social media.

Verified, repeatedly reported dynamics:

• UN experts have warned that forced religious conversion and forced/child marriage of minority girls remains a serious concern, including coercion and weak protection outcomes.

• Reporting and advocacy documentation describe recurring case features: abduction, rapid “marriage/conversion” paperwork, duress-based “consent” claims, and intimidation of families/witnesses through the court process.

• Numbers are contested, but widely circulated estimates (often citing local advocates) claim hundreds to ~1,000+ minority girls per year may be affected; treat totals as indicative risk signals, not gospel, unless an official audit supports them.

⚠️ THREAT PROFILE — THE FORCED CONVERSION PIPELINE

This is the operational pattern ThreatWire watches for:

1) Target selection

• Minority girls with low institutional protection: poor families, limited legal resources, high intimidation pressure.

2) Abduction + coercion

• Snatch/lure → rapid isolation → threats against victim + family.

3) Paper shield

• Fast “marriage” + “conversion” claims used as a legal moat.

4) Courtroom control

• Victim presented beside abductors; “voluntary” statements under duress; coached testimony; families threatened into silence.

5) Social enforcement

• Community pressure + clerical influence + corruption dynamics converge—punishing resistance and rewarding perpetrators.

ThreatWire note: this is why the West cannot treat sharia-supremacist coercion as “just culture.” It’s enforced hierarchy—and it scales when institutions fear confrontation.

Get Full Intel Access

🧭 WHY THIS MATTERS IN THE WEST

1) It’s a worldview collision.
A system that normalizes forced conversion and coerced marriage is incompatible with ordered liberty, equal protection, and consent-based civil law.

2) It’s an intimidation-export risk.
Even when violence doesn’t “transfer,” coercion can: harassment, threats, community enforcement, and retaliation against dissidents (women, reformers, ex-Muslims, Christians, Jews).

3) It’s a transparency and safeguarding issue—not collective guilt.
ThreatWire targets networks, financiers, facilitators, and intimidation actors—not random law-abiding neighbors. Precision is how you win prosecutions and protect the innocent.

✅ WHAT TO DO (U.S. APPLICATION) — THREE POVs

A) Parishioner / Civilian POV (Individual Readiness)

• Read the room: if you see coercion indicators (older “handler,” isolation behavior, visible fear), treat it like a safeguarding event—not gossip.

• Don’t “mediate” alone: pull staff/security; document; preserve evidence.

• Buddy system: especially for youth events and parking-lot transitions.

• If you carry concealed: your mission is escape first. Engage only if required to create distance and protect life. Carrying is not a plan; training + comms + medical is a plan.

B) Church / School Staff POV (Policy & Safeguarding)

• Youth safeguarding rules: two-adult rule, controlled check-in/out, no isolated meetings, camera coverage on entrances/exits.

• Hard boundary: coercion threats are a child safety + law enforcement escalation, not a “family matter.”

• Evidence discipline: preserve footage; write incident reports; don’t “handle quietly.”

C) Security Team POV (Build or Upgrade Starting Now)

If you don’t have a team: build a small, competent, quiet program.

Start with 4 roles: Team Lead, Comms, Medical, Door/Perimeter.
Minimum kit: radios/earpieces, staged trauma kits, discreet staff IDs, written response card.
Training cadence: monthly walk-throughs; quarterly scenario drills; annual outside instruction.
Verification: code-phrase protocols so an attacker can’t fake “staff told me to…”

Upgrade to GUARDIAN

🧠 SDN ANALYSIS — JON WHEATON

A free society can be compassionate without being naïve. When a system repeatedly shields coercion—abduction, forced conversion, forced marriage—that’s not “culture,” it’s control. Our response must be sober and lawful: protect victims, target networks, demand transparency, and build real readiness where Americans live, work, and worship. We are not obligated to import intimidation norms. We are obligated to defend our people and our principles.

And remember in the end, God Wins.

Jon Wheaton

A widely shared Tulsi Gabbard clip is making a point that many leaders refuse to say plainly: Islamism is not simply “private faith.” It is a governing ideology—a political program that seeks power, law, and social enforcement. Where that ideology gains ground, individual liberty and constitutional supremacy come under pressure—sometimes through intimidation, sometimes through “soft” institutional capture, and sometimes through violence.

In a long-form interview, Gabbard described Islamism as a political ideology with an objective of governance under Sharia—framing it as incompatible with a free society built on individual rights and constitutional rule.

ThreatWire’s posture is not “harass peaceful neighbors.” It’s clarity + enforcement:

• The Constitution is the law here.

• There is one civil authority and one standard.

• Any movement—religious or political—attempting to impose parallel systems or coercive enforcement is a security problem, not a diversity project.

📡 CONTEXT

Gabbard’s framing draws a hard distinction that matters operationally:

• Islam (religion): practiced by many law-abiding people who want a quiet life.

• Islamism (political program): about governance, law, and civil authority—often framed as “community defense,” “anti-hate,” or “equity,” but ultimately tested by one question: Do you accept constitutional supremacy, equal protection, and equal rights under one law—yes or no?

In separate public remarks on national security and immigration screening, Gabbard has also highlighted the reality that hostile actors can exploit refugee/immigration pathways and that vetting must be treated as a security function, not a PR exercise.

⚠️ THREAT PROFILE — WHAT “ISLAMISM INSIDE THE BORDER” LOOKS LIKE

This is how ideological capture typically develops before it becomes obvious.

1) Parallel Institutions

• “Community councils” or informal arbitration framed as “cultural accommodation.”

• Pressure on schools, employers, city councils, and police departments to treat one ideology as protected from scrutiny.

• Demands that public policy conform to “community standards” that conflict with equal rights and constitutional law.

ThreatWire translation: soft parallel law becomes the beachhead.

2) Coercive Social Control

Even without bombs, coercion is operational:

• intimidation of dissenters (women, reformers, ex-Muslims, Christians, Jews)

• reputational warfare, doxxing, threats disguised as “activism”

• institutional fear: officials hesitate to enforce laws evenly because they fear the “Islamophobia” label

This is governance-by-pressure.

3) Political Capture via Bloc Mobilization + Narrative Enforcement

• candidates learn: comply, or your event gets swarmed, your family gets targeted, your donors get harassed

• policy begins reflecting fear of backlash, not the public interest

4) Terrorism-Adjacency Risk

Most people will never touch violence. But ideological ecosystems can still generate:

• facilitation (money/logistics)

• recruitment pipelines

• inspired lone actors

• cover for operatives using Western civil liberties as camouflage

The operational point is simple: ideology creates terrain—and that terrain can be exploited.

Get Full Intel Access

🛠️ RESPONSE PACKAGE — WHAT CITIZENS SHOULD DO (WITHOUT BECOMING THE PROBLEM)

This is the adult version: hard lines, clean hands, equal enforcement.

For Civilians

• Name the ideology correctly: Islamism is political. Do not let it be laundered as “just faith.”

• Demand equal enforcement: threats, intimidation, and incitement get prosecuted consistently—no protected classes.

• Reject parallel law: custody, contracts, criminal conduct, and civil rights stay under constitutional civil law.

• Harden your routines: schools, churches, holiday events, and large gatherings should adopt basic security planning and reporting discipline.

For Churches / Faith Communities

• Establish a basic security ministry (3–7 vetted volunteers beats “random guys with guns”).

• Train greeters/ushers for behavior recognition + door control.

• Standardize a MOVE / LOCK / FIGHT emergency call system.

• Build relationships with local law enforcement for walk-throughs and response planning.

For Local Officials / Policymakers

• Treat intimidation campaigns as public-safety and civil-rights issues, not “community engagement.”

• Audit public funding routes (grants, contracts, school partnerships) for financial transparency + compliance.

• Require any org receiving public dollars to meet enforceable standards: open-books auditability, anti-terror-finance certifications, and cooperation requirements.

• Refuse speech policing. If criticism is lawful, it is lawful.

🔎 WHAT TO WATCH — PRACTICAL INDICATORS

• coordinated efforts to label lawful criticism as “hate” to shut down scrutiny

• attempts to impose “community standards” on schools, libraries, or city policy

• threat patterns against dissidents or minority faith groups

• foreign money influence into local institutions

• inconsistent enforcement where intimidation from one faction is excused

Upgrade to GUARDIAN

🧠 SDN ANALYSIS — JON WHEATON

Gabbard’s core framing is correct: a free people cannot defend liberty if they refuse to identify an ideology that is openly hostile to liberty—especially when that ideology seeks civil authority, legal enforcement, and social control.

This isn’t a license to harass peaceful people. It’s the opposite: it’s the disciplined insistence on one law, equal rights, equal enforcement, and constitutional supremacy—with zero tolerance for coercive parallel systems.

Soft conquest becomes hard conquest when a society gets trained to lie about what it’s seeing. Clarity now prevents chaos later.

Godspeed

Jon Wheaton

After jihad-inspired terrorists turned Bondi Beach into a killing field, NSW Premier Chris Minns’ “solution” is tighter gun control on the very people who were targeted. That is the pattern: import the threat, ignore the intel, then punish the law-abiding. Criminals and terrorists don’t comply; congregations and families pay the price.

📡 CONTEXT — WHAT MINNS SAID

• In the wake of the Bondi attack, Minns pledged new legislation to “be really blunt” and “make it more difficult to get these horrifying weapons that have no practical use in our community.”

• Translation: the state that left worshipers defenseless plans to double down on disarming the innocent rather than addressing ideology, border/vetting failures, or repeat “known-to-authorities” lapses.

⚠️ THREAT PROFILE — WHAT THIS MINDSET PRODUCES

• Blame the tool, not the ideology. Focus on hardware avoids hard questions about ISIS-style indoctrination, travel networks, facilitators, and safe havens.

• Security theater over security outcomes. Laws that restrict the compliant do nothing to deter committed attackers who plan around them.

• Soft-target vulnerability. Faith gatherings, festivals, schools, and hospitals remain permissive environments when only police are armed—and minutes away.

• Perverse incentives. Attackers select venues where return fire is least likely. Publicly signaling tighter civilian disarmament increases target attractiveness.

Get Full Intel Access

✅ WHAT WORKS INSTEAD (PUBLIC-SAFE, PRACTICAL)

• Layered venue security: parking-lot overwatch, door control, radio-equipped greeters, camera coverage, and quarterly drills for ushers and staff.

• Known-subject enforcement: resource the units that actually knock on doors, seize contraband, and disrupt networks—don’t just “monitor” until after an attack.

• Targeted disqualification: rigorously enforce prohibitions for flagged individuals (terror watch hits, violent histories), with rapid due-process review.

• Rapid medical dominance: staged trauma kits, trained volunteers, and pre-planned ambulance corridors to blunt casualty counts.

• Lawful self-defense integration: where legal, vetted concealed carriers and trained protection teams inside houses of worship/faith events—documented standards, quarterly quals, deconfliction with police.

  Get the POC-1 Ultras for only $399 for two radios and no annual fee for LTE network service for the life of the radios. This price is only for the first 1,000 units sold. After that they’ll be $1,140 a pair, and $29 to $65 a year for LTE service.

  Get them HERE.

  

🧍 FOR CIVILIANS (QUICK LIST)

• On arrival: identify two exits and two pieces of hard cover; avoid footbridges and choke points.

• If shots/bangs: move laterally to cover (“Off the X”), then create distance; expect secondary threats before clustering at aid points.

• Comms & care: family rally point, charged phones on vibrate, minimalist IFAK (tourniquet/pressure/chest seals).

👮 FOR LAW ENFORCEMENT (PUBLIC-SAFE REMINDERS)

• Assume secondary devices and follow-on attackers; push perimeters before mass ingress.

• Pre-plan counter-sniper angles on overlooks/footbridges; assign overwatch during major events.

• Blue-on-blue prevention: clear IFF procedures; expect lawful armed citizens at faith venues in many jurisdictions—deconflict fast.

  Upgrade to GUARDIAN

🧠 SDN ANALYSIS — JON WHEATON

When leaders face a jihadist attack on disarmed civilians and conclude the fix is to make disarmament tighter, that is not public safety—it is control. Government’s biblical and constitutional duty is to punish evil and protect the innocent, not render them helpless and call that virtue. Bondi is the warning: the right to self-defense is not a hobby; it is a survival requirement in an age where imported ideologies openly target your family. The West was built by armed, responsible citizens and communities willing to defend what God entrusted to them. Abandon that—and you abandon the flock.

GodSpeed
Jon Wheaton

Texas Education Freedom Accounts are poised to send $10,800+ per child (more for special needs) to schools led by Hamed Ghazali—a figure named in the Muslim Brotherhood’s 1991 “Explanatory Memorandum,” who in the late ’80s promoted jihadi recruitment/fundraising tapes and amplified networks that later fed al-Qaeda/Hamas. If this stands, taxpayers—including Christian families—subsidize an ideological infrastructure the Brotherhood itself described as its educational war machine.

Keep reading below …

DISCLOSURE
This post may contain affiliate links. If you make a purchase through them, we may earn a small commission at no extra cost to you. This helps keep our work independent. Thank you for your support.

📡 CONTEXT — HOW WE GOT HERE

Step 1 (1988): Jihad goes public in U.S. mosques.
Ghazali’s “Ghazali Islamic Video” circulates recruitment and fundraising appeals in American Islamic centers, platforming aides tied to Abdullah Azzam (bin Laden’s mentor), praising Americans who leave to fight, and soliciting “weapons support.” Appeals reference the Occupied Land Fund—the precursor to Holy Land Foundation (later convicted for funding Hamas).

Step 2 (1991): Named in the Brotherhood plan.
The Muslim Brotherhood Explanatory Memorandum outlines a “civilization-jihad” strategy in North America—explicitly identifying education, youth, and community institutions as tools. Hamed Ghazali is named within that educational architecture.

Step 3 (2000s–2020s): From jihad tapes to school leadership.
Ghazali migrates into Islamic education leadership: ISNA/MAS orbit, MASCIS chair, curriculum/training across North America; now Houston Quran Academy and related projects—same person, rebranded as school administrator.

Step 4 (2026–27): Texas voucher money hits.
Under Education Freedom Accounts, schools can bill $10,800+ per student (up to $30,000 for special-needs). Ghazali tells local press he’ll raise tuition to the voucher, turning every seat into a state-subsidized revenue stream.

Step 5: State tools now exist.
Gov. Greg Abbott has designated the Muslim Brotherhood (and CAIR) as foreign terror / transnational criminal organizations at the state level, enabling asset holds, funding blocks, and investigations—and RAIR Foundation USA has delivered an evidentiary dossier to the Governor.

Get Full Intel Access

⚠️ THREAT PROFILE — WHY THIS ISN’T JUST “RELIGIOUS SCHOOLING”

1) Ideological hardening of minors
A K-12 ecosystem shaped by a man who promoted jihad recruitment, Hamas fundraising vectors, and the Brotherhood’s doctrine is not neutral pedagogy—it’s civilizational contest via classrooms.

2) State-subsidized movement building
Voucher dollars don’t just pay tuition—they expand facilities, staff, and reach, compounding the network’s long-game institutional power.

3) Networked risk
Touchpoints with ISNA/MAS and other MB-linked bodies present later funnels for radicalization, fundraising, and political pressure—now scaffolded by taxpayer funds.

🛠️ RESPONSE PACKAGE — WHAT TEXAS SHOULD DO (NOW)

Cut the money

• Bar EFA funds from any school with demonstrated ties to MB/Hamas-linked entities or individuals explicitly named in the Explanatory Memorandum.

• Require open-books audits (beneficial owners, related-party transactions, vendor lists) for all voucher-recipient schools; non-compliance = immediate de-enrollment.

Investigate the network

• Use the state designation to launch criminal/financial investigations into Ghazali’s organizations.

• Map flows (tuition, grants, donations), governance (boards, affiliates), and content (curriculum, guest speakers, off-campus programming).

• Scrutinize property acquisitions and partner schools for front-entity patterns.

Protect families from coerced complicity

• Provide opt-out guarantees so Christian and other families are not forced (via tax/tuition mechanics) to subsidize MB-aligned education.

• Make religious-school disclosures mandatory: governance, affiliations, and curriculum standards—before accepting a single voucher dollar.

Tighten the program

• Add eligibility certifications: no funds where individuals named in designated networks hold leadership, ownership, or material influence.

• Publish a public recipient registry with annual audit summaries.

🛰️ WHAT TO WATCH — INDICATORS OF RISK OR CAPTURE

• Sudden tuition hikes to match the voucher at targeted schools.

• Affiliate reshuffles (shell boards, new DBAs) concurrent with voucher rollout.

• Litigation to block audits/transparency.

• Coordinated PR campaigns framing scrutiny as “religious persecution” while dodging substantive disclosures.

🧭 LINES WE HOLD (CHRISTIAN, CONSTITUTIONAL, LAWFUL)

• No taxpayer subsidy for hostile ideological projects.

• One law for all: transparent books, lawful curriculum standards, and zero tolerance for terror-linked networks—no exceptions.

• Parental choice ≠ public funding for civilizational subversion.

Upgrade to GUARDIAN

🧠 SDN ANALYSIS — JON WHEATON

The Muslim Brotherhood told us the plan: build schools, youth programs, and community institutions to reshape the culture from the inside. Hamed Ghazali is not an incidental name—he’s on their page, by their hand, with a taped history of amplifying jihad networks—and now sits astride Texas voucher eligibility.

A Christian nation that funds this funds its replacement. This isn’t about persecuting Muslims—it’s about refusing to underwrite a movement that openly declares it will conquer, not assimilate. Texas has evidence and legal tools. If the pipeline stays open, it’s not ignorance—it’s cowardice.

Information is survival. Act accordingly.

Godspeed
Jon Wheaton

A viral claim says up to 50% of visas in Minnesota are fraudulent, with fraudulent beneficiaries enrolling in government programs and siphoning massive sums. Even if the true rate is far lower, the security logic stands: visa fraud = identity fraud = exploitable holes for hostile actors (terror networks, cartels, foreign intel). Treat this as a program-integrity and homeland-security problem, not a talking point.

Keep reading below …

DISCLOSURE: This post contains affiliate links. If you make a purchase through them, we may earn a small commission at no extra cost to you. This helps keep our work independent. Thank you for your support.

📡 CONTEXT

• Claims: “50% of visas are fraudulent” in MN; “hundreds of billions” stolen via benefits. These figures are yet not backed by published federal datasets at this time mainly because these take years to publish.

• What history shows: U.S. audits have uncovered benefits/immigration fraud, sham sponsorships, fake employment, and identity mills in multiple states; Minnesota has prosecuted Medicaid/benefits scams previously. Visa/benefit fraud has been used in past criminal and terror-linked cases.

• ThreatWire posture: treat the numbers as allegations until audited, but move now on risk controls that don’t depend on the exact percentage.

Get Full Intel Access

⚠️ THREAT PROFILE — WHY VISA FRAUD = SECURITY RISK

• Funnel to access: A fraudulent or fraud-assisted visa can yield clean-looking identity, SSN, and program enrollment—perfect cover for logistics and movement.

• Operational blend: Fraudsters can embed in communities, move remittances, and stage materials under “legitimate” status.

• Cross-contamination: Cartel smuggling, fake documents, and extremist facilitation often share routes, vendors, and launderers.

• Downstream effects: Every counterfeit identity weakens watchlist matching, E-Verify, and benefit eligibility screening—raising the miss rate on true threats.

  

🛠️ RESPONSE PACKAGE — IF WE’RE SERIOUS

1) Immediate Federal/State Audit Stack (MN priority, scalable nationally)

• Cross-match visa classes ↔ SSNs ↔ benefits (Medicaid/EBT/housing) ↔ wage data.

• Flag clusters: same addresses/phones/sponsors; non-working-age adults with benefits but no verifiable work; duplicate identities; “ghost employers.”

• Triage lanes: high-risk categories to pre-payment review and ID reverification.

2) Criminal, Civil, and Immigration Consequences (Evidence-Based)

• Charge: visa/ID fraud, conspiracy, benefits fraud, money laundering; and material support where evidence supports it.

• Seizure/forfeiture of assets tied to fraud; lifetime program bans for convicted offenders.

• Non-citizens convicted: visa revocations, removal proceedings, and re-entry bars under existing law.

3) Identity Hardening (Close the Holes, Not the Border Patrol’s Eyes)

• Sponsor integrity: real-time validation of sponsors (tax filings, payroll, physical sites).

• Document forensics: expand state/federal fraud labs for foreign document verification; shared specimen libraries.

• Biographic–biometric fusion with guardrails: tighter checks at status updates and benefit enrollment (with strict retention and use limits).

• E-Verify++: mandatory for state contractors and healthcare vendors billing public programs; penalty escalators for willful misconduct.

4) Benefits Program Integrity (Stop the Money Magnet)

• Pre-payment edits for high-risk providers and addresses; anomaly-based locks that suspend and review before payout.

• Beneficial-owner transparency for any org taking public dollars; refusal → debarment.

• Whistleblower bounties and shielded hotlines in target languages.

5) National-Security Layer (Assume Some Percentage = Non-Financial Threat)

• Run flagged identities through watchlists, financial-intel corridors, and travel history.

• Prioritize rings, not rhetoric: focus on facilitators, document vendors, sponsors-for-hire, and money handlers.

🛰️ WHAT TO WATCH — INDICATORS OF SCALE OR COVER-UP

• Sudden benefit-roll revisions or mass “voluntary withdrawals.”

• Sponsor farms (same sponsor across dozens of applicants).

• State agencies slow-walking data requests; “privacy” cited to block aggregate, de-identified disclosures.

• Spike in forfeitures and sealed indictments tied to document vendors or remitters.

• Coordinated media ops minimizing fraud while quiet policy memos tighten controls.

🧭 LINES WE HOLD (APPLY TO EVERYONE)

• One law for all: constitutional supremacy; no parallel systems.

• Precision over prejudice: target proven rings and facilitators; protect law-abiding neighbors.

• Transparency or no money: public funds require open-books audits and owner disclosure.

INFORMATION IS SURVIVAL…

Free subscribers get headlines. Guardians get intel—private Signal channels, emergency alerts, direct access. When fraud touches national security, speed and accuracy both matter.

Upgrade to GUARDIAN

🧠 SDN ANALYSIS — JON WHEATON

If “50%” is accurate, Minnesota isn’t mismanaged—it’s compromised. If it’s not 50% but still systemic, the mission doesn’t change: find the rings, cut their money, shred their documents, and end their status. The same pipeline that steals tax dollars can move people, phones, and parts for something far worse.
A Christian nation can be compassionate and vigilant: mercy for the honest, judgment for the corrupt—by the book, with receipts, and all the way up the chain.

GodSpeed
Jon Wheaton

TSA has posted a notice to launch a “modernized alternative identity verification” program: if you show up without acceptable ID, you can submit biometrics and pay a user fee to try to clear security. The fee is $18 and covers a 10-day use window—access still isn’t guaranteed. This lowers near-term friction for would-be attackers and builds a long-term biometric spine that invites mission creep, abuse, and catastrophic data risk.

Keep reading below …

SDN GUARDIAN ANNUAL SUBSCRIPTIONS ARE 50% UNTIL MIDNIGHT CYBER MONDAY

SUBSCRIBE NOW BEFORE THIS OFFER EXPIRES

📡 CONTEXT

The Federal Register notice states TSA will replace its manual “no-ID” process with a tech-enabled alternative that uses biographic and/or biometric data to verify identity and route you to screening; participation is optional, but charged. Fee: $18 “per 10-day use.” This sits alongside ongoing TSA facial-comparison/“Touchless ID” deployments at select checkpoints. REAL ID enforcement remains federal policy, but this creates a fallback lane that normalizes biometrics.

⚠️ THREAT PROFILE

Near-term (terrorism window)
• Friction collapse: a paid, repeatable alternate lane attackers can rehearse.
• Identity assurance shift: from “something you have” to “something you are,” reducing adversary workload if watchlist hits are evaded via weak biographic anchors.
• Red-team magnet: a standardized kiosk process encourages probing at scale.

Long-term (civil-liberty risk)
• Biometric capture state: faces/fingerprints become a travel gate—hard to opt out once normalized.
• Mission creep: “temporary fallback” → permanent program → expansion beyond airports.
• Catastrophic breach risk: you can’t reissue a face; a central ID backbone is a prime target. Independent oversight bodies have already flagged TSA facial-recognition risks.

Get Full Intel Access

🧍‍♂️ FOR TRAVELERS — PRACTICAL STEPS

• Keep primary ID current (REAL ID, passport); don’t rely on the fallback lane.
• Decline facial capture where options exist; request manual verification.
• Document any biometric enrollment you’re asked to accept (photos of signage, note the lane, date/time).

🧑‍⚖️ CIVIL-LIBERTY GUARDRAILS (WHAT TO DEMAND)

• Physical ID remains the standard; fallback use must be rare, manual-authorized, audited—no subscription model.
• Strict retention limits; no sharing beyond screening mission without warrant/predicate.
• Independent red-team testing; publish breach plans and vendor roles before national roll-out.

🛰️ WHAT TO WATCH (GO-LIVE INDICATORS)

• Federal Register publication finalized; TSA announces public registration portal.
• Contract awards and rapid kiosk expansion at CAT-2 lanes.
• Quiet extensions of retention windows or expansion to rail/bus travel.

INFORMATION IS SURVIVAL…

Free subscribers get headlines. Guardians get the intel—private Signal channels, emergency alerts, and direct access. When the state starts trading freedom for “convenience,” which side are you on?

Upgrade to GUARDIAN

🧠 SDN ANALYSIS — JON WHEATON

This is the two-step slide every free nation regrets: first you lower the bar “just this once” for convenience, then you keep everyone’s face on file because it’s “efficient.” Short-term, a pay-to-verify lane widens the attack funnel. Long-term, it builds a centralized biometric backbone that bad actors and future bureaucrats can weaponize. Security without surrender means keeping ID standards high, biometric use narrow and voluntary, and oversight with actual teeth. A Christian people doesn’t outsource liberty to kiosks. We carry ID, we guard our data, and we refuse a future where our faces become the government’s permission slip.

GodSpeed
Jon Wheaton

A viral claim says Minnesota’s autism-care Medicaid mills pumped diagnoses and ABA/therapy billing from ≈$3M (2018) to ≈$400M (2023). Allegations include $300–$1,500 per child kickbacks, 3× claim rates in specific provider clusters, and remittance corridors that could overlap with extremist finance of al-Shabaab.
If verified at scale, this isn’t “benefit waste.” It’s organized theft of a compassion system, and a homeland vulnerability if any dollars touch extremist pipelines. The answer: indictments, seizures, lifetime program bans, and 2339B charges only where evidence supports it, plus immigration consequences for convicted non-citizen perpetrators.
We hammer criminal rings and financiers, without smearing whole communities.

Keep reading below …

DISCLOSURE
This post contains affiliate links. If you make a purchase through them, we may earn a small commission at no extra cost to you. This helps keep our work independent. Thank you for your support.

📡 CONTEXT

• Autism Dx + ABA/therapy billing inflated by specific networks.

• Families allegedly paid $300–$1,500 per child to keep claims flowing.

• Spend reportedly jumped ≈$3M (2018) → ≈$400M (2023).

• Certain Somali-linked clusters allegedly show 3× the autism claim rate vs. rest of MN.

• Proceeds allegedly moved via MSB/hawala-style remittance corridors; some accounts allege downstream extremist exposure (unverified).

Proven precedent (terror-finance reality)

• Holy Land Foundation: largest U.S. terror-finance prosecution—material support to Hamas—proves charity/benefits → foreign corridor → jihad is a known risk model (precedent ≠ proof in MN).

Ideological backdrop (relevant, not proof)

• 1991 Muslim Brotherhood “Explanatory Memorandum” (trial exhibit) outlines long-horizon “civilization-jihad” concepts and front-organization strategy—why some networks treat Western civil systems as exploitable terrain.

Aid-diversion risk (risk ≠ proof)

• GAO/OIG have long documented diversion vulnerabilities in conflict theaters; Partner-Vetting exists to stop funds from bleeding into extremist hands. MN linkage must be proven by audits + tracing + indictments.

⚠️ THREAT PROFILE — WHAT A REAL AUTISM-MILL PIPELINE LOOKS LIKE

Fraud signatures

• ABA coding explosions beyond medical norms; impossible clinician schedules.

• Cloned notes, “ghost” providers, templated diagnostics.

• Near-100% Medicaid mix with luxury build-outs; sudden scale.

• “New” clinics spinning up with recycled owners/officers under fresh NPIs.

Kickback mechanics

• $300–$1,500 per child cash/gifts; “transport stipends” masking inducements.

• Families pressured to sign blanks or threatened with service loss.

Cash-out choreography

• Split deposits, sub-threshold rungs, rapid MSB pass-throughs timed to state disbursements.

Foreign pass-through

• Repetitive corridors to the same recipients; layered “family tax” notes; opaque overseas nodes.

Operational artifacts

• Multiple phones/SD cards, coded notes, infrastructure photos/maps.

• Tight ownership webs across “separate” clinics; shared staff and addresses.

🛠️ RESPONSE PACKAGE — MAXIMUM LAWFUL PRESSURE

Criminal & Civil

• Charge where evidence fits: Health-care fraud (18 USC 1347), Money laundering (1956/1957), Conspiracy (371), False Claims Act (treble damages), and Material support (2339B) only with proven intent/benefit tracing.

• Seize & forfeit: clinic accounts, MSB float, real estate, vehicles, luxury assets.

• Provider death penalty: permanent Medicare/Medicaid exclusion, NPI revocations, officer/owner liability across affiliates.

• Restitution & clawbacks: liens and disgorgement targeting personal and corporate assets.

Financial Intelligence / Treasury

• FinCEN advisories + enhanced SAR narratives on autism-fraud typologies & hawala layering.

• GTOs on MSBs serving affected corridors; bulk-cash interdiction tasking.

• Section 311 measures on non-cooperating foreign nodes to choke channels.

Program Integrity (State & CMS)

• Pre-payment review for outliers; hard caps on weekly ABA hours unless a second independent physician signs medical necessity.

• Unannounced site checks; GPS/biometric visit verification for in-home services.

• Ownership transparency (beneficial-owner disclosure) or de-enrollment.

• Rapid-suspension triggers on anomaly spikes; whistleblower bounties and hotline blitz.

Immigration (individual, post-conviction)

• For non-citizen convicts: removal proceedings and re-entry bars under existing INA authorities—case-by-case, due process intact.

Media & Public Oversight

• Demand de-identified utilization data by CPT code/county; publish integrity actions, indictments, and forfeitures.

• Separate criminal rings from law-abiding neighbors. Precision builds credibility—and convictions.

Get Full Intel Access

🛰️ WHAT TO WATCH — MINNESOTA INDICATORS

• Clinics with luxury build-outs + near-total Medicaid payer mix.

• Suspended owners reappearing under fresh NPIs/LLCs.

• MSB spikes after state payment runs; repetitive overseas recipients with cross-linked addresses.

• Family reports of cash/gifts to retain services; community influencers discouraging cooperation with investigators.

• Parallel finds: multiple phones, maps, SD cards, foreign IDs during unrelated stops/searches.

🔎 CLEAN TALKING POINTS (STAY PROSECUTABLE)

• HLF convictions are established fact (material support to Hamas).

• The 1991 MB memo exists (trial exhibit) and outlines long-horizon strategy; relevance is contextual, not proof in MN.

• GAO/OIG have flagged diversion risks for years; risk ≠ proof.

• MN’s numbers and any terror linkage must be established through audits, tracing, and charges—not hashtags.

🧭 CIVIC LINES & ASSIMILATION (APPLIES TO EVERYONE)

• One law for all: constitutional supremacy; no parallel legal systems in civil/criminal domains.

• Constitutional loyalty tied to immigration/naturalization benefits (oaths enforced; violations penalized under existing law).

• Civics/English standards enforced; fast-track compliance programs; debar NGOs from public funds if they won’t meet audits/anti-terror certifications.

• Transparency or no money: any faith/civic org receiving public dollars signs open-books and anti-terror financing attestations—refusal = debarment.

Get the POC-1 Ultras for only $399 for two radios and no annual fee for LTE network service for the life of the radios. This price is only for the first 1,000 units sold. After that they’ll be $1,140 a pair, and $29 to $65 a year for LTE service.

Get them HERE.

INFORMATION IS SURVIVAL…

Free subscribers get the headlines. Guardians get the intel—private Signal channels, emergency alerts, and direct access to our team. When things go bad, which one do you want your family and friends to be?

Upgrade to GUARDIAN

🧠 SDN ANALYSIS — JON WHEATON

If Minnesota really went $3M → $400M in five years—paired with kickbacks and 3× claim clusters—that’s a siren you can hear from space. This is how hostile networks exploit open societies: corrupt the compassion pipeline, siphon it, launder it. The fix is relentless law: 1347, 1956/57, FCA, and 2339B where the evidence takes you; FinCEN pressure on corridors; lifetime program bans; and removal proceedings for convicted foreign actors.

We don’t cover for criminals.
We don’t smear the innocent.
We hunt rings—with precision and force.

GodSpeed
Jon Wheaton

Intel indicates jihadist networks are leveraging modified synthetic opioids (fentanyl analogs) to blunt pain, mute fear, and extend endurance in selected operatives.
Result: a subject who looks like a routine fentanyl user may actually be a mission-focused external-ops actor. Treat narcotics + anomalies as potential pre-attack interdictions until ruled out.

DISCLOSURE: This post contains affiliate links. If you make a purchase through them, we may earn a small commission at no extra cost to you. This helps keep our work independent. Thank you for your support.

📡 CONTEXT

Cartel supply chains and terror logistics already overlap. The next evolution: purposeful conditioning of small cells with altered opioid stacks to push through pain, resist compliance, and mask pre-attack tells. U.S. officers and K9 teams touch these pipelines daily; the risk is mislabeling a conditioned operative as “just another OD.”

⚠️ THREAT PROFILE — OPERATIONAL BEHAVIOR

What the “chem-hardened” profile can present like:

• Pain tolerance: minimal response to strikes/OC/Taser; keeps advancing.

• Aggression & speed: explosive, goal-directed surges vs. random thrashing.

• Fear blunting: ignores commands and obvious risks; closes distance.

• Cognition: incoherent speech, tunnel focus; purposeful hand movement.

• Pre-attack masking: gloves, improvised armor, staged clothing; micro-glances to carried items.

👉 If behavior doesn’t fit a “typical user” and tracks mission focus, elevate your threat picture.

🧰 THIS ISN’T A NORMAL DOPE STOP — RED-FLAG BUNDLE

Narcotics present plus any of the following ⇒ shift to pre-attack interdiction mindset (public-safe):

• Multiple phones/SD cards, handwritten codes, infrastructure photos/maps.

• Foreign IDs, extra passports, conflicting identity stories.

• Tactical gloves, plates/DIY armor, med gear staged unusually.

• Travel anomalies: long mileage; routing between port/rail hubs with weak cover story.

• Packaged syringes/vials w/ no Rx; injector kits.

• High aggression + incoherence and strong resistance to pain/compliance tools.

STAND WITH THE MISSION …

If you rely on our SITREPs and ThreatWire briefings to stay ahead of what’s coming, upgrade to Guardian today. Your support keeps SDN independent and our intelligence flowing—no filters, no sponsors, no censorship.

Get Full Intel Access

🐕‍🦺 K9 TEAMS — DUAL-THREAT MINDSET

A K9 narcotics alert may indicate:

1. routine user/courier,

2. operative conditioning artifacts, or

3. transport node for a cell.

Handler actions (public-safe):

• Treat every alert as intel opportunity; preserve scene; supervisor early.

• Scan for artifacts (devices, maps, IDs, diagrams) before narrowing to “simple possession.”

• Notify up-channel when behavior + artifacts diverge from a routine drug case.

• Mind secondary hazards (powders/aerosols). PPE for you; protect the dog (no direct muzzle contact with residue; follow agency vet protocols).

🛡️ OFFICER SAFETY — CONTACT & CONTROL (PUBLIC-SAFE REMINDERS)

• Time / distance / cover: create space; don’t rush hands-on with a pain-tolerant subject.

• Team tactics: two-officer minimum for frisk; third for 360 cover.

• Tool sequencing: expect reduced OC/Taser effect; emphasize distance and coordinated control.

• Medical staging: keep EMS out of likely secondary-device zones; don’t stack units in one kill box.

• Evidence hygiene: glove up; bag powders separately; avoid field-testing unknowns in open air.

📲 INTEL & REPORTING — MAKE THE STOP COUNT

• Document the bundle, not just the dope (devices, maps, IDs, travel log, clothing loadout).

• Digital preservation: Faraday options; quick note of lock screen/time/alerts (per policy).

• Deconflict fast: alert fusion center/JTTF if indicators suggest external ops; request intel holds before routine release.

• Narrative clarity: explain why behavior diverged from a typical OD/user; be specific and non-speculative.

🛰️ WHAT TO WATCH — OPERATIONAL INDICATORS

• Route convergence: drug corridors aligning with critical-infrastructure nodes.

• Training vernacular: “evolutions,” “handlers,” “cells,” “waves,” “martyr gear.”

• Chem/med artifacts: labeled/unlabeled vials + armor in ordinary sedans.

• Target materials: ingress/egress sketches for hospitals, supermarkets, churches, transit.

• Timing clusters: contacts near significant dates; probe-and-paralyze sequences across neighboring jurisdictions.

Get the POC-1 Ultras for only $399 for two radios and no annual fee for LTE network service for the life of the radios. This price is only for the first 1,000 units sold. After that they’ll be $1,140 a pair, and $29 to $65 a year for LTE service.

Get them HERE.

🔊 FEATURED OFFER / GEAR BLOCK

Preparedness Essentials — Partners We Trust

Why here: when a routine stop turns strategic, comms, medical, and legal matter most.

👉 Consider vetted options for training tools (Mantis), legal defense (CCWSafe), carry/EDC (Vertx), and protective equipment (Maverick Tactical).

👮‍♂️ SUPERVISORS & TRAINING — AGENCY CHECKLIST (PUBLIC-SAFE)

• Roll-call update: add the chemically hardened attacker profile alongside classic OD signs.

• Force-on-force reps: scenarios with reduced pain response; emphasize spacing and team control.

• K9 SOP addendum: fentanyl scene handling for canine safety; exposure/antidote protocols.

• Intel hooks: standing pathway with fusion/JTTF for narcotics-plus indicators.

• After-action loop: capture lessons; refine your red-flag bundle and reporting templates.

INFORMATION IS SURVIVAL...

Free subscribers get the headlines. Guardians get the intel — private Signal channels, emergency alerts, and direct access to our team. When things go bad, which one do you want your family and friends to be?

Upgrade to GUARDIAN

🧠 SDN ANALYSIS — JON WHEATON

Training wired cops to see fentanyl as overdose and collapse. Keep that file — add a new one: chem-hardened, mission-driven fighter. Cartels and jihadists already share labs and lanes; modified opioids to build pain-tolerant, fear-blunted attackers is the logical next step.

Treat “dope stops” like what they can become: your one clean shot at the attack cycle — phones, routes, networks. Keep the threat picture wide, write detailed reports, and handle K9 hits like the pre-attack interdictions they might be.

GodSpeed
Jon Wheaton

Reports of dozens of new mosques across Texas in ~24 months are circulating (figures under verification). At the same time, Islamist rhetoric abroad continues to advocate Sharia governance, jizya for non-Muslims, and a society ordered under Islamic law.

Our editorial doctrine is simple: America’s public philosophy is Christian in origin and constitutional in practice. Sharia is a comprehensive religious legal code and has no standing as civil authority in Texas. Free worship for all; zero parallel religious law in courts, contracts, classrooms, or policy.

DISCLOSURE: This post contains affiliate links. If you make a purchase through them, we may earn a small commission at no extra cost to you. This helps keep our work independent. Thank you for your support.

📡 CONTEXT

Texas metros (DFW, Houston, Austin, San Antonio) are seeing visible growth in Islamic congregations and community centers. That reality coexists with three fixed pillars of American order: religious liberty, non-establishment, and constitutional supremacy.

• Civil disputes (custody, inheritance, contracts, crime) are settled in civil court.

• Religious arbitration is voluntary among consenting parties — and never binding when it conflicts with state or federal law.

• No faith tradition (Christian, Jewish, Muslim, other) may install a parallel civil code.

⚠️ THREAT PROFILE — POLICY & CULTURE (NOT PANIC)

What to watch, and where to hold the line lawfully and peaceably:

• Parallel-law risk: Any attempt to apply Sharia norms (compelled dress/segregation, blasphemy rules, unequal status in family law) in public policy, school discipline, workplace rules, or civil adjudication.

• Soft-law creep: “Temporary accommodations” that functionally replace neutral rules and create two standards of conduct.

• Quasi-tribunals: Private “rulings” pressed as binding beyond consenting members, especially in family or property matters.

• Foreign influence: Sudden expansions with opaque funding, visiting preachers, or curricula promoting supremacist governance or political violence.

• Civic friction points: Zoning shortcuts, “equity” exemptions that sidestep safety/occupancy norms applied to everyone else.

STAND WITH THE MISSION...

If you rely on our SITREPs and ThreatWire briefings to stay ahead of what’s coming, upgrade to Guardian today. Your support keeps SDN independent and our intelligence flowing – no filters, no sponsors, no censorship.

Get Full Intel Access

🧍‍♂️ FOR TEXANS — PRACTICAL CIVIC ACTION (PUBLIC-SAFE)

Lawful, transparent, equal-protection steps every community can take:

• Verify the numbers: Check city permits, county records, nonprofit filings. Debate policy on facts, not rumor.

• School guardrails: Insist on viewpoint-neutral policies; no religious codes as disciplinary standards.

• Workplace clarity: Respect individual religious practice without importing religious law into HR rules.

• Zoning daylight: Attend planning meetings; demand traffic/safety reviews applied equally to all houses of worship.

• Equal protection: Oppose any faith-based push that would undercut women’s/children’s rights or speech/conscience protections.

• Security with charity: Build church safety teams; cooperate with law enforcement; condemn all advocacy of violence.

Get the POC-1 Ultras for only $399 for two radios and no annual fee for LTE network service for the life of the radios. This price is only for the first 1,000 units sold. After that they’ll be $1,140 a pair, and $29 to $65 a year for LTE service.

Get them HERE.

🔊 FEATURED OFFER / GEAR BLOCK

Preparedness Essentials — Partners We Trust

Why here: strong communities defend both freedom of worship and one standard of law. That takes comms, training, and clear legal footing.

👉 Consider vetted options for training tools (Mantis), legal defense (CCWSafe), carry/EDC (Vertx), and protective equipment (Maverick Tactical).

🏛️ FOR STATE & LOCAL OFFICIALS — POLICY GUARDRAILS

• Reaffirm supremacy of law: Publish guidance that no foreign/religious code supersedes Texas statutes in any civil matter.

• Civil-only adjudication: Ensure courts retain jurisdiction when any party objects to religious arbitration.

• Neutral enforcement: Apply fire, occupancy, safety, and noise codes even-handedly to all congregations.

• Funding transparency: Where lawful, require disclosure of foreign financing tied to governance agendas.

• Community briefings: Share indicators of political-Islam organizing that advocates violence or non-constitutional law — without stigmatizing peaceful worshipers.

🛰️ WHAT TO WATCH — OPERATIONAL INDICATORS

• Official confirmation (or refutation) of the “dozens of new mosques in ~24 months” claim via public records.

• Policy drafts in schools/HR introducing Sharia-like norms (speech controls, sex-segregation mandates).

• Arbitration creep: Religious decisions pressed as de facto civil rulings beyond consenting parties.

• Import pipelines: Visiting clerics/curricula advancing Islamic state or jizya concepts in civic life.

INFORMATION IS SURVIVAL...

Free subscribers get the headlines. Guardians get the intel – private Signal channels, emergency alerts, and direct access to our team. When things go bad, which one do you want your family and friends to be?

Upgrade to GUARDIAN

🧠 SDN ANALYSIS — JON WHEATON

Hard truth: Christian civilization and Sharia governance cannot co-rule the same public square. America’s covenant is constitutional and — historically — Christian. The right response is clarity without cruelty: love your Muslim neighbor, protect religious freedom, and draw a bright legal line — no Sharia as civil authority in Texas or anywhere else in the Republic. Assimilation to our laws is the price of admission to our public life. Hold the line at constitutional supremacy, biblical moral truth in public ethics, and equal protection under one law.

Godspeed,
Jon Wheaton
TW Team Leader

🧠 BLUF

Intel from operators and analysts like Sarah Adams points to a new phase: multi-team, multi-day, Mumbai-style warfare on U.S. soil — not one bomber, one mall, one “incident.”

The target set is everyday life: supermarkets, churches, hospitals, trains, nightclubs, and roadways, hit in coordinated waves while first responders are ambushed and hospitals are attacked.

The fighters aren’t amateurs. Think Fallujah-grade combatants, trained in 360° shoot houses — often built by us — with real-time comms, suicide vests, and no exfil plan.

This isn’t “an active shooter.” It’s urban warfare imported into your zip code, on purpose, so Americans — especially veterans — feel Iraq and Afghanistan at home.

DISCLOSURE: This post contains affiliate links. If you make a purchase through them, we may earn a small commission at no extra cost to you. This helps keep our work independent. Thank you for your support.

📡 CONTEXT

Operators and analysts tracking al-Qaeda and allied jihadist planning are sounding the same note: the next major homeland attack is built around teams, not lone wolves; days, not minutes; multiple sites, not a single crime scene. The design echoes Mumbai, Westgate Mall, October 7th, and urban battles from Iraq and Syria — but aimed squarely at American civilian life where we live, work, and play. Supermarkets, churches, ERs, trains, nightclubs, and highways become battle spaces; first responders become primary targets, not rescuers.

⚠️ THREAT PROFILE — WHAT THEY’RE TRAINING FOR

🎯 Target Set: Everyday America
These are the places in the crosshairs:

• Supermarkets & shopping complexes

• Nightclubs, churches, and public transportation

• Hospitals and ERs – not as safe zones, but as deliberate targets to cripple medical response

• Roadblocks & choke points to ambush arriving police, EMS, and fire

Goal:

• Make Americans feel what terrorists felt in Iraq, Syria, and Afghanistan — but here.

• Break the mental resilience of veterans and civilians by showing that home is a battlefield too.

👥 Team Structure & Tactics

• 5–7 man teams and 8–10 man teams operating in parallel

• Backup cells ready to execute if a first team gets rolled up

• Real-time comms between attackers and remote handlers

• Dynamic targeting: ability to shift targets/methods on the fly based on police response and media coverage

• Training in 360° ballistic shoot houses, often U.S.-built facilities left behind overseas

• Heavy emphasis on CQB (Close Quarters Battle) and distributed, local attacks

• Combat experience on par with Fallujah-era insurgents — a level U.S. law enforcement has never faced at scale on home ground

🧱 Behavior & Mindset

• No exfil, no escape plan — fight to the death is the baseline

• Tip-of-the-spear personnel: best-trained, most ideologically committed fighters deployed to the West

• Attackers likely drugged to amp aggression and blunt fear/inhibition

• Estimated 10% as suicide bombers — on the order of 75–100 individuals in a full campaign

• Chemical/caustic additives in suicide vests, turning detonations into dirty hazmat scenes

🎭 Specific Tactics & Deception

• Wave attacks:

  • First bomber or gunman hits a target

  • As crowds surge and responders enter, second bomber walks in and detonates in the chaos

• Impersonation plays:

  • Attackers dressed as law enforcement, IDF, medics, ambulance crews

  • Fake checkpoints and fake rescue teams to lure victims and responders

• Booby traps:

  • Teddy bears, backpacks, and other objects seeded to attract curious civilians

  • Secondary IEDs aimed at those who pick them up or cluster around them

• Hospital-focused attacks:

  • ER entrances, waiting rooms, triage zones, and ambulance bays deliberately targeted

  • Objective: cripple medical care and multiply casualty counts

• Road ambushes:

  • Obstacles and “accidents” staged to slow patrol cars, fire engines, and ambulances

  • Kill zones set along likely response routes

🆚 HOW THIS DIFFERS FROM “NORMAL” TERRORISM

Most Americans — and most cops — still think in terms of:

• “Lone shooter in a mall.”

• “Single bombing at one site.”

This framework is fundamentally different:

• Multiple Fallujah-grade squads with modern comms, not one disgruntled loner.

• Multi-site, multi-day operations, not a single 15-minute attack.

• Hospitals and responders treated as prime targets, not protected space.

• Suicide vests, booby traps, and hazmat payloads built into the plan from the start.

This is urban warfare inside your area code — not “an incident,” not “a disturbance,” not “a lone wolf.”

STAND WITH THE MISSION...

If you rely on our SITREPs and ThreatWire briefings to stay ahead of what’s coming, upgrade to Guardian today. Your support keeps SDN independent and our intelligence flowing – no filters, no sponsors, no censorship.

Get Full Intel Access

🧍‍♂️ FOR EVERYDAY AMERICANS — PRACTICAL STEPS

You can’t control the threat design. You can control how un-ready you are.

Know Your Local Soft Targets

• Identify the supermarkets, churches, hospitals, malls, and transit hubs you use most.

• Pay attention to entrances, exits, choke points, parking layouts, and what “normal” looks like.

Build a Family Response Plan

• Pick a primary and secondary rally point away from high-profile targets.

• Decide who grabs which kids, who calls 911, and what happens if phones go down.

• Practice a simple drill: “If something bad starts here, what do we do in the first 30 seconds?”

Get Off the X, Then Help

• If an attack starts: move away from the threat, use cover, break line of sight.

• Only render aid if the immediate area is no longer actively contested — second waves and secondary devices are part of the playbook.

Train Beyond Headlines

• Basic Stop the Bleed skills (tourniquets, pressure, wound packing).

• Situational awareness: noticing pre-attack behaviors (loitering, odd clothing, staging vehicles, people filming security).

Churches, Schools, Hospitals — Speak Up

• If your church or kids’ school has no security plan, that’s a problem. Offer to help start one.

• Ask politely but firmly: “Who locks doors? Who calls 911? Who meets police? Where’s the trauma kit?”

Get the POC-1 Ultras for only $399 for two radios and no annual fee for LTE network service for the life of the radios. This price is only for the first 1,000 units sold. After that they’ll be $1,140 a pair, and $29 to $65 a year for LTE service.

Get them HERE.

🔊 FEATURED OFFER / GEAR BLOCK

Preparedness Essentials — Partners We Trust

Why here: if war-zone tactics are coming to where you live, comms, medical gear, and legal defense are not luxuries. They’re necessities.

👉 Consider vetted options for training tools (Mantis), legal defense (CCWSafe), carry/EDC (Vertx), and protective equipment (Maverick Tactical).

👮‍♂️ FOR LAW ENFORCEMENT & FIRST RESPONDERS — PUBLIC-SAFE REMINDERS

This scenario is above the standard “active shooter” playbook. Train and posture accordingly.

Think Multi-Site from the First Call

• Assume the first attack may not be the main effort.

• Expect decoys, car fires, and hoax calls to pull units away from the real objective.

Protect the Protectors

• Treat approach routes, ER bays, and staging areas as potential kill zones.

• Use overwatch and staggered arrivals instead of stacking cruisers in obvious spots.

Hospital & EMS Integration

• Conduct joint drills with hospitals on in-hospital attacker and ER surge under fire scenarios.

• Plan for hot / warm / cold zones around medical facilities, not just the primary attack site.

Comms Discipline

• Assume adversary OSINT and possible SIGINT: don’t hand them your plan over open channels.

• Use plain but tight language, avoid speculation, and maintain clear incident command despite chaos.

Learn from Overseas Urban Combat

• Incorporate lessons from Mumbai, Nairobi, Paris, and October 7th into training scenarios – stacked assaults, multiple teams, hostiles in mixed civilian crowds.

• Work with Guard/Reserve and vetted veterans who have CQB and urban warfare experience to stress-test local plans.

🛰️ WHAT TO WATCH — OPERATIONAL INDICATORS

At the national and regional level, these are early-warning themes:

• Increased militant chatter or propaganda emphasizing “make America feel what we felt” or referencing veteran towns and hospitals.

• Theft or stockpiling of medical gear, uniforms, or emergency vehicles, and reports of fake medics or fake cops probing response protocols.

• Recon and probing of ER entrances, ambulance bays, and hospital security, not just malls and stadiums.

• Multi-city “tests” — small arson events, hoax bomb threats, or minor attacks spaced close together to measure response patterns.

INFORMATION IS SURVIVAL...

Free subscribers get the headlines. Guardians get the intel – private Signal channels, emergency alerts, and direct access to our team. When things go bad, which one do you want your family and friends to be?

Upgrade to GUARDIAN

🧠 SDN ANALYSIS — JON WHEATON

Three things should stick in your mind. Scale: we’re not talking about one angry guy with a rifle. We’re talking teams of 5–10, multiple sites, backup cells, and days of rolling contact. Training: they’re not improvising; they’re using our old ranges, our shoot houses, lessons from Mumbai and Fallujah, and sometimes even training we gave them before they flipped. Mindset: they’re not negotiating and they’re not fleeing. They’re fighting to the death with suicide bombers and booby traps built into the script.

If you’re still picturing men in sandals with rusty AKs, you’re behind the curve. This is war-zone doctrine deliberately imported into American neighborhoods to make you feel what they felt. The answer isn’t despair; it’s a sober, collective decision to harden what matters, train like we mean it, and stop pretending that “normal” will protect us.

GodSpeed
Jon Wheaton

Intel on al-Qaeda’s next U.S. homeland plot says the quiet part out loud: veteran-heavy communities are prime targets.

As Sarah Adams puts it: their goal is to make veterans feel in their hometowns what they felt in Iraq, Syria, and Afghanistan.

This isn’t just about casualties; it’s psychological warfare — turning small-town USA into a mental replay of Fallujah or Kabul.

Veteran towns are not background noise in this fight. They are symbolic objectives.

DISCLOSURE: This post contains affiliate links. If you make a purchase through them, we may earn a small commission at no extra cost to you. This helps keep our work independent. Thank you for your support.

📡 CONTEXT

Emerging threat assessments on al-Qaeda’s homeland planning make one theme clear: they are looking past the classic big-city landmark play and zeroing in on veteran-heavy communities — towns near bases, Guard and Reserve hubs, and patriotic suburbs where flags fly and uniforms are common. The concept isn’t just to kill people; it’s to recreate the emotional feel of a war zone in the places where American veterans live, work, worship, and raise families. When a veteran hears gunfire and sees smoke on the same streets where they taught their kid to ride a bike, the enemy’s psychological objective is met.

⚠️ THREAT PROFILE

How veteran-heavy communities end up on the target list:

Primary Targeting Concept
Hit towns and suburbs with high veteran density — near active-duty installations, Guard armories, Reserve centers, VA hospitals, and patriotic “flag on every porch” communities.

Desired Psychological Effect
Make America feel like Fallujah, Kabul, Mosul — but in small-town USA.
Break the mental resilience of those who’ve already seen combat by sending one message: “Nowhere is safe — not even home.”

Likely Tactical Blend (High-Level)

• Multi-site attacks designed for duration and chaos, not just a single burst.

• Combination of mass shootings, IEDs, arson, vehicle attacks, and planted threats to overwhelm local law enforcement and EMS.

• Sequenced or overlapping hits on soft targets: churches, parades, malls, stadiums, VA clinics, VFW halls, school events.

Why Veterans?

• Symbolic: Veterans embody American military strength and the willingness to fight back.

• Psychological: If you can demoralize people who’ve already “been to hell,” everyone watching gets the message.

• Media: “War comes home to veteran town” is a headline tailor-made for maximum shock.

STAND WITH THE MISSION...

If you rely on our SITREPs and ThreatWire briefings to stay ahead of what’s coming, upgrade to Guardian today. Your support keeps SDN independent and our intelligence flowing – no filters, no sponsors, no censorship.

Get Full Intel Access

🧍‍♂️ FOR VETERANS & FAMILIES — PRACTICAL STEPS

You are not just residents. You are high-value symbolic targets. Act like it.

Know Your Local Soft Targets
Map the places in your town that pack people in with minimal security:

• Churches and synagogues

• VA clinics and Vet Centers

• VFW/Legion posts

• High school games, parades, and fairs

• Shopping centers and big-box parking lots

Those are the spots adversaries will look at first.

Stand Up Neighborhood & Church Security

• Volunteer for or help build safety teams at churches, schools, and community centers.

• Push for basic access control (fewer open doors), radios, and trauma kits.

• Offer your experience: many leaders want a plan but don’t know where to start — you do.

Train Beyond the Range

• Get reps in trauma care (tourniquets, wound packing, airway basics).

• Brush up on situational awareness, not just marksmanship.

• Rehearse family actions: rally point, who grabs which kid, who calls 911, what to do if you’re separated.

Build a Veteran Resilience Cell

• Form small, trusted groups of vets who can:

  • share intel about local threats and suspicious activity;

  • help stand up security and medical plans at key locations;

  • support families if something happens (transport, childcare, security checks).

Refuse the Isolation Trap
The enemy wants vets isolated, bitter, and checked out. Stay plugged into:

• church or faith communities,

• vet organizations,

• local preparedness groups.
  Community is armor.

Get the POC-1 Ultras for only $399 for two radios and no annual fee for LTE network service for the life of the radios. This price is only for the first 1,000 units sold. After that they’ll be $1,140 a pair, and $29 to $65 a year for LTE service.

Get them HERE.

🔊 FEATURED OFFER / GEAR BLOCK

Preparedness Essentials — Partners We Trust

Why here: when your hometown becomes a target on purpose, comms, medical, and protective gear are the difference between helpless and ready.

👉 Consider vetted options for training tools (Mantis), legal defense (CCWSafe), carry/EDC (Vertx), and protective equipment (Maverick Tactical).

🏛️ FOR LOCAL LEADERS — MAYORS, PASTORS, SHERIFFS, VFW COMMANDERS

Veteran-heavy towns have backbone. Now they need structure.

Harden the Obvious

• Lock and monitor exterior doors at churches and civic buildings once events begin.

• Install cameras covering parking lots, main entrances, and gathering areas.

• Position greeters/ushers as eyes and early warning, not just hand-shakers.

Integrate Veterans Into Planning

• Put veterans on your emergency planning boards.

• Use their experience to stress-test your mass-casualty, evac, and comms plans.

• Run simple tabletop exercises: “What if three things went wrong at once?”

Align Law Enforcement & Community Plans

• Hold joint meetings between sheriff, police, fire/EMS, churches, schools, and veterans’ groups.

• Map out:

  • staging areas,

  • medical surge sites,

  • traffic and lockdown protocols.

Communicate Without Panic

• Talk openly about preparedness without turning every event into a fear-fest.

• Frame it like this: “We lock doors and have fire exits. Now we’re adding one more layer for a different risk.”

🛰️ WHAT TO WATCH — OPERATIONAL INDICATORS

At the local level, pay attention when you see:

• Unusual surveillance of veteran-heavy locations: people filming entrances, counting cameras, or repeatedly circling by car.

• Anonymous threats or online chatter targeting veterans’ groups, memorial events, or specific churches in your town.

• Multi-site drills or small “tests” — small fires, hoax calls, or suspicious packages near multiple veteran-linked sites in a short period.

• Sudden appearance of new faces at VFW posts, churches, or patriot rallies who ask probing questions about security, schedules, or response plans.

INFORMATION IS SURVIVAL...

Free subscribers get the headlines. Guardians get the intel – private Signal channels, emergency alerts, and direct access to our team. When things go bad, which one do you want your family and friends to be?

Upgrade to GUARDIAN

🧠 SDN ANALYSIS — JON WHEATON

If you live in a veteran-heavy community, hear me: you are not background. You are the message. The enemy wants you to hear sirens and explosions on the same streets where you grill on the Fourth and coach Little League, because that’s how you turn a “war on terror” into a war on the American mind. When veterans start to feel that nowhere is safe — not even home — everyone else takes the hint.

The answer isn’t panic or paranoia. It’s preparation with purpose. Harden your churches and schools. Build real security teams. Use the hard lessons from Iraq, Afghanistan, and Syria to protect the people you love, right where you live. Veterans did not spend years learning how to survive hostile ground just to shrug and hope someone else handles it here.

GodSpeed
Jon Wheaton

🧠 BLUF

At UC Berkeley, a Turning Point USA event turned violent when a masked, far-left Muslim protester allegedly robbed and beat a TPUSA vendor/attendee in the face, leaving him bloodied on the ground.

The attacker, 25-year-old Jihad Dphrepaulezz — a California public-health employee and rapper “A.R. The Believer” — showed up gloved and masked, then tried to melt back into the crowd after the attack.

Viral video shows the bloodied conservative cuffed and led away first, while the attacker initially blended into the mob — the perfect snapshot of campus double standards in 2025.

Hours later, DOJ’s Civil Rights Division announced a federal probe into whether UC Berkeley failed to protect conservatives’ First Amendment rights. The message: this isn’t just “campus drama” anymore.

DISCLOSURE: This post contains affiliate links. If you make a purchase through them, we may earn a small commission at no extra cost to you. This helps keep our work independent. Thank you for your support.

📡 CONTEXT

A TPUSA event at UC Berkeley drew the usual cast of far-left and Antifa-aligned protesters. Tensions escalated when a masked protester allegedly ripped a chain off a TPUSA vendor, then repeatedly punched him in the face, leaving him bleeding on the pavement. The suspect was later identified as Jihad Dphrepaulezz, a state public-health worker and Muslim rapper who performs as “A.R. The Believer.” Initially, officers cuffed and walked away the bloodied conservative while the masked attacker drifted back into the crowd. Only after more evidence and witness statements did police arrest and charge Dphrepaulezz with assault and robbery — just as DOJ announced a full civil-rights investigation into Berkeley’s handling of conservative speech and mob violence.

⚠️ THREAT PROFILE

What this incident reveals about campuses, state employees, and the new “normal”:

State Employee, Street Violence
A California Department of Public Health employee allegedly shows up to a campus protest in gloves, dark clothing, and a face covering, targets a TPUSA vendor, snatches his chain, and pounds his face. That’s not “student unrest” — that’s an ideologically motivated street attack by someone on the government payroll.

Two-Tier Reflex on Campus
The first person cuffed and marched away? The bloodied conservative vendor. Only later, after witnesses and video, is the masked attacker arrested and charged. This is the bias millions already feel:

• Conservative, white, Christian, pro-freedom shirt? Presumed problem.

• Masked far-left protester shouting the “right” slogans? Presumed victim until forced otherwise.

Antifa Environment, Predictable Outcome
The protest was organized and amplified by far-left and Antifa-style groups. Reports mention clashes, fireworks, paint and glass thrown at police — yet somehow the real “public order” priority became removing the TPUSA attendee who got his face smashed.

Federal Line in the Sand
DOJ’s Civil Rights Division, working with the FBI-led Joint Terrorism Task Force, has opened a probe into whether UC Berkeley provided adequate security and whether officials tolerated mob intimidation of conservatives. If this is more than theater, it’s a warning shot to every university treating right-leaning events as open season.

STAND WITH THE MISSION...

If you rely on our SITREPs and ThreatWire briefings to stay ahead of what’s coming, upgrade to Guardian today. Your support keeps SDN independent and our intelligence flowing – no filters, no sponsors, no censorship.

Get Full Intel Access

🧍‍♂️ FOR STUDENTS & CONSERVATIVES ON CAMPUS — PRACTICAL STEPS

You are in contested territory. Act like it.

Document Everything
At events, assume you may need evidence later.

• Film from the start of the event, not just when things go bad.

• Capture faces, clothing, and any visible weapons or tools.

• Back up video to the cloud immediately.

Know Your Rights & Your Risks
You have the right to speak, assemble, and table — but understand that culture and instinct on many campuses tilt against you.

• Stay on the right side of university rules and local law.

• Don’t be the one to throw the first shove or insult; keep your posture disciplined.

Move With a Buddy System
Never table or attend a hot event alone.

• Pair up at tables and exits.

• Have a designated “camera person” and a designated “witness” who isn’t yelling back.

When Violence Happens

• Get Off the X: create distance from the attacker and the mob.

• Call 911 as soon as possible; clearly state who was attacked and what happened.

• Show responding officers your video and name witnesses on the spot.

• Do not let anyone talk you into “not pressing charges” in the name of “campus unity.”

Law Up Early
If you’re injured or arrested, contact an attorney before making detailed statements. Conservative legal-defense groups exist for exactly this reason — know which ones serve your area before you step on campus with a sign.

Get the POC-1 Ultras for only $399 for two radios and no annual fee for LTE network service for the life of the radios. This price is only for the first 1,000 units sold. After that they’ll be $1,140 a pair, and $29 to $65 a year for LTE service.

Get them HERE.

🔊 FEATURED OFFER / GEAR BLOCK

Preparedness Essentials — Partners We Trust

Why here: when street politics turns physical, comms, documentation, and legal backup matter more than clever slogans.

👉 Consider vetted options for training tools (Mantis), legal defense (CCWSafe), carry/EDC (Vertx), and protective equipment (Maverick Tactical).

👩‍💼 FOR UNIVERSITIES, ADMINISTRATORS & CAMPUS POLICE — PUBLIC-SAFE REMINDERS

If you’re serious about “safety and inclusion,” this is your audit.

Police Violence, Not Viewpoints
Your job is to prevent assault and robbery, not to manage ideological outcomes. If the one bleeding is the one in cuffs, you’ve already failed the optics and the mission.

Neutral Security Planning
For any high-heat event:

• Require clear protest zones and keep egress lanes open.

• Put uniformed officers between speakers and mobs, not just watching from a distance.

• Enforce the same standards on all sides: no masks, no weapons, no projectiles.

After-Action Transparency
When an incident happens, publish clear timelines: who was arrested, why, and what charges were filed or dropped. Sunlight is your only chance to rebuild trust with students who now assume the system is rigged.

Train Against Ideological Bias
Walk officers and staff through scenarios where the “approved” identity is the aggressor and the “unapproved” conservative is the victim. Make it clear: facts first, politics never.

🛰️ WHAT TO WATCH — OPERATIONAL INDICATORS

• Additional video angles confirming the sequence of the Berkeley attack and police response.

• Whether charges against the attacker stick, get plea-bargained away, or quietly disappear.

• How UC Berkeley and other universities modify security plans and protest policies for future conservative events.

• Whether DOJ’s civil-rights probe results in real findings and corrective orders — or just a press release and silence.

INFORMATION IS SURVIVAL...

Free subscribers get the headlines. Guardians get the intel – private Signal channels, emergency alerts, and direct access to our team. When things go bad, which one do you want your family and friends to be?

Upgrade to GUARDIAN

🧠 SDN ANALYSIS — JON WHEATON

Berkeley laid the pattern bare: a masked far-left activist shows up with gloves and a disguise, targets a conservative for robbery and a head shot, then tries to vanish back into the mob — and the first person who ends up in cuffs is the guy bleeding on the ground. That isn’t an accident. It’s what happens when an entire culture quietly decides that “the wrong kind of speech” invites violence.

If you’re a conservative on a modern campus, understand this: you are in enemy-held terrain. The institution may still print your diploma, but it will not automatically protect your rights. So document everything. Build networks. Lawyer up. And don’t let anyone gaslight you into thinking that political beatings are just “protests that went too far.” They are a warning of what comes next if the line isn’t held.

GodSpeed
Jon Wheaton

Indian security services just shattered the “poor, uneducated terrorist” myth by busting a terror cell built around doctors and other professionals.

A Kashmiri government doctor and fellow physicians tied to Jaish-e-Mohammed (JeM) and Ansar Ghazwat-ul-Hind were arrested with roughly 300+ kg of explosive agents, rifles, grenades, and IED components near Delhi.

Investigators describe it as a “white-collar terror ecosystem” — educated professionals recruiting, funding, and engineering mass-casualty bombings under charity and social covers.

Education doesn’t stop jihadist ideology. It weaponizes it.

Keep reading below …

DISCLOSURE: This post contains affiliate links. If you make a purchase through them, we may earn a small commission at no extra cost to you. This helps keep our work independent. Thank you for your support.

📡 CONTEXT

Indian authorities have dismantled a terror module stretching from Kashmir to Delhi, and at the center were not illiterate villagers but doctors. A Kashmiri government doctor — once at Government Medical College Anantnag — was picked up after being caught putting up Jaish-e-Mohammed propaganda. From his locker and locations tied to him, police recovered weapons and links to handlers. Interrogation led to another doctor from Pulwama working near Delhi, where raids uncovered hundreds of kilos of explosives, rifles, pistols, and sophisticated IED components. The module, which includes multiple doctors and an imam, is accused of planning mass-casualty bombings in Delhi markets and across North India.

⚠️ THREAT PROFILE

What the case actually shows — and why it matters beyond India:

Primary Suspect: The Kashmiri Doctor
A Kashmiri doctor, formerly at a government medical college in Anantnag, was arrested after CCTV footage showed him posting pro–Jaish-e-Mohammed material. A search of his locker and linked spots turned up an AK-47, ammunition, and evidence connecting him to JeM and Ansar Ghazwat-ul-Hind handlers.

Faridabad Raids: The Second Doctor & the Cache
Under interrogation, the first doctor pointed police to another physician from Pulwama, living and working in Faridabad near Delhi. Raids on his premises produced:

• Roughly 300–360 kg of explosive agents (primarily ammonium nitrate, initially reported as RDX)

• Assault rifles (AK variants), pistols, magazines, and 80+ live rounds

• Timers, remote controls, wiring, batteries, walkie-talkies, and other IED components

Scope of the Network
Investigators say this was part of a larger 2,900 kg explosives haul and at least eight arrests, including three doctors and an imam. Authorities have labeled it a “white-collar terror ecosystem” leveraging professional and academic networks for recruitment, fundraising, logistics, and cover — often under the banners of “charity,” “social service,” and “community aid.”

The Logic: “No One Suspects the Doctor”
Handlers reportedly believed highly educated professionals — especially doctors — would slip under the radar in Delhi and the broader NCR region. White coats, degrees, and respectable jobs were part of the camouflage.

Planned Objective
Police and media reports indicate the explosives were to be turned into multiple powerful IEDs for Delhi markets and North Indian population centers, with a secondary goal of triggering communal riots and mass destabilization.

STAND WITH THE MISSION...

If you rely on our SITREPs and ThreatWire briefings to stay ahead of what’s coming, upgrade to Guardian today. Your support keeps SDN independent and our intelligence flowing – no filters, no sponsors, no censorship.

Get Full Intel Access

🧍‍♂️ FOR EVERYDAY AMERICANS & WESTERNERS — HOW TO THINK ABOUT WHITE-COLLAR JIHAD

This isn’t “just an India story.” It’s a mirror for the West.

Stop Believing the Hollywood Terrorist
The barefoot, uneducated “cave man with an AK” is the exception, not the rule. The planners are often doctors, engineers, IT specialists, and finance professionals. If your mental model is stuck in the 1990s, you will miss the actual threat in 2025.

Watch for Ideology + Access, Not Just Background
“Good job,” “good family,” and “good grades” don’t cancel out extremist ideology. The real risk is when radical beliefs meet access — to chemicals, hospitals, airports, financial systems, or sensitive infrastructure.

Question the “But He’s Educated” Reflex
When media or local leaders dismiss concerns about someone’s radical statements with “but he’s a doctor / engineer / grad student,” recognize that as a deflection, not a defense. Education makes an operator more capable, not magically moderate.

Support Real Vetting, Not Cosmetic Checks
Whether it’s a foreign medical recruit, a research fellowship, or a high-trust technical role, demand that institutions prioritize ideological and security vetting, not just diversity optics and credentials.

Talk About This in Your Own Circles
Bring this case up at church, in your preparedness group, or in your local civic circles. Use it to reset people’s assumptions: educated does not mean safe — and signals of jihadist sympathy or extremist ideology must not be hand-waved away because of a diploma.

🔊 FEATURED OFFER / GEAR BLOCK

Preparedness Essentials — Partners We Trust

Why here: understanding the threat is step one; having comms, legal cover, and protective gear when things go sideways is step two.

👉 Consider vetted options for training tools (Mantis), legal defense (CCWSafe), carry/EDC (Vertx), and protective equipment (Maverick Tactical).

👮‍♂️ FOR SECURITY, INTEL & POLICY — PUBLIC-SAFE ACTIONS

For professionals in law enforcement, intel, and risk management, this case is a flashing red light.

Bake “White-Collar Jihad” into Your Threat Model
Update risk profiles to explicitly include professionals and students in medicine, engineering, IT, and academia as high-value recruitment targets, not low-risk by default.

Follow Networks, Not Stereotypes
Track recruitment and funding through:

• Student and professional associations

• “Charity” fronts and NGOs

• Religious or ideological study circles around campuses and hospitals

Flag patterns where respectable covers + radical messaging + unexplained money or travel intersect.

Tighten Access to Dual-Use Materials
Hospitals, labs, and industrial facilities often have access to chemicals and equipment that can be repurposed for IEDs. Ensure access controls, audits, and anomaly detection aren’t waived just because the badge says “Dr.”

Integrate Behavioral + Technical Indicators
Pair threat intel (travel history, online activity, known sympathies) with logistics anomalies like unusual equipment orders, odd storage patterns, and cross-border financial flows under “charity” labels.

Train Your People Out of Class Bias
Make it explicit in training: social status, accent, and degrees are not security indicators. Use this India case as a scenario: three doctors and an imam running hundreds of kilos of explosives under everyone’s nose.

🛰️ WHAT TO WATCH — OPERATIONAL INDICATORS

• Terror or criminal cases abroad that prominently feature doctors, engineers, or graduate students as bombmakers, logisticians, or recruiters.

• Repeated discovery of explosives, weapons, or encrypted comms in apartments tied to professionals or academic staff.

• “Charities” or “social organizations” that aggressively recruit among high-achieving students and professionals, with opaque finances and strong ideological messaging.

• Messaging from jihadist groups explicitly calling for doctors, engineers, and IT specialists to join specialized operational roles.

INFORMATION IS SURVIVAL...

Free subscribers get the headlines. Guardians get the intel – private Signal channels, emergency alerts, and direct access to our team. When things go bad, which one do you want your family and friends to be?

Become a GUARDIAN

🧠 SDN ANALYSIS — JON WHEATON

This India case isn’t a weird outlier — it’s the future. When terror groups realize they can hide behind degrees, hospital badges, and academic titles, they don’t get weaker; they get far more dangerous. The system still wants you picturing a ragged militant in a cave. Reality in 2025 is a “white-collar jihadist” with a medical license, three hundred kilos of ammonium nitrate, and a handler on an encrypted app.

For America and the West, the lesson is blunt: stop treating education as a safety blanket. Watch for the fusion of ideology and access, not the comfort of a résumé. When you hear “doctor” or “engineer” in a terror case, don’t say “wow, that’s surprising.” Say: “Right — that’s the model.”

GodSpeed
Jon Wheaton

🧠 BLUF

Today, President Donald J. Trump is hosting Syrian President Ahmed al-Sharaa at the White House — the first-ever visit by a Syrian head of state to Washington.

Al-Sharaa is the former jihadist commander Abu Mohammed al-Jolani, ex-emir of al-Qaeda–linked Hayat Tahrir al-Sham, who once carried a $10 million U.S. bounty before sanctions and terror designations were lifted in the post-Assad reset.

At the same time, in Suwaida, Druze and Christian minorities are still counting their dead after 2025 massacres — and marching under a new Druze National Guard to defend themselves against the very government al-Sharaa now commands.

The question for persecuted Christians and Druze is brutal:
Will Trump confront this ex-jihadist president over massacres and minority persecution — or shake his hand for “stability” and move on?

Keep reading below …

DISCLOSURE: This post contains affiliate links. If you make a purchase through them, we may earn a small commission at no extra cost to you. This helps keep our work independent. Thank you for your support.

📡 CONTEXT

After the fall of Bashar al-Assad in late 2024, Ahmed al-Sharaa — better known to the world as Abu Mohammed al-Jolani — rode his rebel coalition and Western backing into Syria’s presidency. Sanctions and UN terror listings that once marked him as an al-Qaeda figure were peeled away this year to clear the way for a new partnership. Now Trump is using the White House visit to lock Syria into a U.S.-led framework against ISIS and away from Iran and Russia — even as reports from Suwaida and coastal regions document mass killings, displacement, and sectarian targeting of Druze, Christians, and other minorities by forces aligned with the new regime.

⚠️ THREAT PROFILE

From “terror list” to “strategic partner” — and who pays the price:

• White House meeting, November 10
  Trump is hosting al-Sharaa to cement Syria’s pivot into a U.S.-led coalition against ISIS, with agenda items including security cooperation and loosening or repealing remaining Caesar Act sanctions.
  The visit follows U.S. and UN moves to lift sanctions and remove al-Sharaa from terrorism blacklists.

• Who al-Sharaa / “Jolani” actually is

  • Former emir of Jabhat al-Nusra and later Hayat Tahrir al-Sham (HTS), al-Qaeda’s on-the-ground franchise in Syria’s northwest for years.

  • Once carried a $10 million U.S. reward under the Rewards for Justice program.

  • Rebranded himself as a “national leader” and transitional president as Assad fell — but his forces and allied factions have been accused of sectarian abuses against Alawites and other minorities.

• Suwaida’s 2025 bloodshed
  In mid-2025, Suwaida and surrounding Druze regions saw heavy violence: government forces and allied militias launched campaigns that rights groups say included extrajudicial executions of Druze civilians, looting, and siege tactics that cut food, medicine, and fuel.
  Christian and Druze communities report churches burned, villages emptied, and believers of Druze background who converted to Christianity killed or driven out.

• Druze National Guard rises
  In response, more than 35–40 Druze militias have consolidated into a National Guard structure under Druze spiritual leadership, claiming to defend an autonomous Druze zone in Suwaida.
  On November 9, Unit 108 of Brigade 164 paraded through Suwaida’s streets with fighters and vehicles — a clear message to Damascus and to al-Sharaa’s government: further offensives will be met with organized resistance.

• Faith leaders sounding the alarm
  U.S. church and faith leaders have already urged Trump in an open letter to press al-Sharaa directly on massacres of Christians, Druze, Alawites and others in Suwaida and Latakia — warning that minorities face “ongoing violence, displacement, starvation, and deprivation” under the new order.

STAND WITH THE MISSION...

If you rely on our SITREPs and ThreatWire briefings to stay ahead of what’s coming, upgrade to Guardian today. Your support keeps SDN independent and our intelligence flowing – no filters, no sponsors, no censorship.

Get Full Intel Access

🧍‍♂️ FOR BELIEVERS, DRUZE & WATCHMEN — HOW TO READ THIS MOMENT

This summit isn’t just “another meeting.” For persecuted communities, it’s a stress test of American resolve.

• See the trade, not just the photo op
  The pitch in D.C. is simple: flip an ex-jihadist strongman into “our guy” to keep Syria from fragmenting, box out Iran, and pound ISIS. That stability comes with a cost — minorities in Suwaida, Latakia, and beyond know exactly whose blood is being traded.

• Listen to the minorities themselves
  Read the statements from Druze, Christians, Alawites, and Kurds speaking from Suwaida, Latakia, Geneva, and diaspora forums. They’re saying the same thing: “The war may be ‘over’ on TV, but for us, the brutality continues.”

• Pray with precision, not vagueness
  Pray by name: Suwaida, Jaramana, Latakia coast, the Druze National Guard, underground churches, and Christian converts from Druze and Alawite backgrounds who now face double persecution.

• Pressure leaders where you live
  In the U.S., UK, EU, and Israel, push your representatives:

  • Will you condition support for al-Sharaa’s government on verifiable protections for Christians and Druze?

  • Will you demand independent investigations into 2025 massacres before sanctions disappear forever?

• Prepare locally, not just globally
  Lessons from Syria apply at home: minorities and churches that relied on “the system” for protection found out the hard way that systems can change hands overnight. Build local resilience, church security, and mutual-aid networks now — before you need them.

Get the POC-1 Ultras for only $399 for two radios and no annual fee for LTE network service for the life of the radios. This price is only for the first 1,000 units sold. After that they’ll be $1,140 a pair, and $29 to $65 a year for LTE service.

Get them HERE.

🔊 FEATURED OFFER / GEAR BLOCK

Preparedness Essentials — Partners We Trust

Why here: when great powers normalize ex-jihadists and look past burned churches, your local readiness is the only line you control.

👉 Consider vetted options for training tools (Mantis), legal defense (CCWSafe), carry/EDC (Vertx), and protective equipment (Maverick Tactical).

👥 FOR POLICYMAKERS, ADVOCATES & CHURCH LEADERS — PUBLIC-SAFE ACTIONS

If you sit anywhere near the levers of policy or public opinion, this is your moment of clarity test.

• Tie support to protection
  Any aid, sanctions relief, or security partnership with al-Sharaa’s government should be explicitly conditioned on:

  • stopping campaigns in Suwaida and Druze regions;

  • verifiable protection for churches and minority neighborhoods;

  • investigations and accountability for 2025 massacres.

• Refuse whitewash language
  Push back when briefings reduce Suwaida and coastal atrocities to “local clashes” or “tribal tensions.” Insist on the words massacre, persecution, sectarian targeting where they apply.

• Platform minority voices
  When delegations from Syrian minorities visit DC, London, Brussels, or Jerusalem, put them on the record: hearings, press conferences, church events. Don’t let only regime-friendly figures speak for “Syria.”

• Watch the integration debate
  U.S. envoys are already arguing over whether Druze, Kurds, Christians, and Alawites should be folded fully under Damascus or allowed meaningful autonomy and their own security structures. How that question is answered may decide whether 2025 was a one-off massacre or the opening round.

🛰️ WHAT TO WATCH — OPERATIONAL INDICATORS

• Joint Trump–al-Sharaa statements: do they mention Druze and Christian protection by name, or just “stability” and “counter-terrorism”?

• Follow-on in Suwaida: after the photo op, do we see new offensives, sieges, or arrests targeting Druze and Christian communities — or genuine de-escalation?

• Status of the Druze National Guard: does Damascus move to crush it, co-opt it, or leave it as a buffer? Watch for new clashes and Israeli signaling about protecting Druze across the border.

• Sanctions and Caesar Act maneuvering: monitor Congress and State for moves to repeal or permanently waive sanctions without hard human-rights conditions. (

INFORMATION IS SURVIVAL...

Free subscribers get the headlines. Guardians get the intel – private Signal channels, emergency alerts, and direct access to our team. When things go bad, which one do you want your family and friends to be?

Upgrade to GUARDIAN

🧠 SDN ANALYSIS — JON WHEATON

On the briefing paper, this is textbook realpolitik: flip an ex-jihadist into an American partner to keep Syria from breaking apart and to check Iran. But in Suwaida, Latakia, and the shattered outskirts where churches and Druze villages still smolder, it looks like something else: the man whose movement once flew al-Qaeda colors is now walking into the White House, while their dead are barely in the ground.

The hard truth is this: Washington is willing to normalize ex-jihadists if it believes it buys “stability,” and minority blood is treated as a negotiable line item in the deal. If Trump doesn’t publicly press al-Sharaa on Druze and Christian massacres, on concrete protections, and on real accountability, then this summit is not a breakthrough — it’s a warning. A warning that the free world will work with whoever it wants, and that persecuted believers remain expendable.

GodSpeed
Jon Wheaton

Churches are prime soft targets: open doors, predictable schedules, and dense crowds with little or no security.

Terrorists, ideological extremists, and unstable lone actors all know this — but most churches still operate like it’s 1950, not 2025.

You don’t need a SEAL team; you need a simple plan: eyes up, exits known, roles defined, and a small safety team with radios, trauma kits, and clear rules for armed defenders.

Preparedness doesn’t kill worship — it protects it. A church with a plan is no longer an easy target.

Keep reading below...

DISCLOSURE: This post contains affiliate links. If you make a purchase through them, we may earn a small commission at no extra cost to you. This helps keep our work independent. Thank you for your support.

📡 CONTEXT

From Sri Lanka to Sutherland Springs to scattered “one-off” incidents the media forgets by Monday, churches have proven to be high-impact, low-cost targets. In the U.S., most Sunday gatherings still feature unlocked side doors, no dedicated safety team, and zero trauma gear — even as hostile ideology and mental health crises spike. This ThreatWire is a national brief for American churches: how to watch for trouble, what to do when it starts, and how to stand up a small safety team that integrates concealed carriers without turning the sanctuary into a circus.

⚠️ THREAT PROFILE

What makes churches attractive targets — and what that means for you:

• Soft target by design
  Open doors, “all are welcome,” predictable service times, and large groups seated, heads bowed, lights dimmed.

• Attackers & motives
  Jihadists, ideologically driven extremists, personal vendettas, domestic abusers, deranged lone actors — the motive changes, the tactics rhyme: guns, blades, arson, vehicles, and occasionally explosives.

• Most common windows of attack
  Pre-service (parking lot), right after service begins (doors closing, people focused forward), or dismissal (crowds bottlenecking at exits).

• Biggest vulnerabilities
  Unlocked side doors, no one watching the parking lot, no radio comms, no plan for children’s areas, and no one trained in trauma care when seconds matter.

• What changes outcomes
  A few switched-on people with clear roles, radios, a working 911 plan, and basic medical gear can cut casualties dramatically.

STAND WITH THE MISSION…

If you rely on our SITREPs and ThreatWire briefings to stay ahead of what’s coming, upgrade to Guardian today. Your support keeps SDN independent and our intelligence flowing – no filters, no sponsors, no censorship.

Get Full Intel Access

🧍‍♂️ FOR PARISHIONERS — EYES OF THE FLOCK

Your job isn’t to be paranoid — it’s to be present and aware.

• Scan on arrival
  Notice loitering near doors, people filming entrances, repeated drive-bys, or vehicles parked oddly close to the building.

• Clock the odd stuff
  Bulky clothing in warm weather, large bags brought into the sanctuary, someone pacing the halls, asking odd questions about security or schedules.

• Know your exits
  From wherever you sit, identify two ways out: primary aisle + alternate route. Sit with kids and elders in mind.

• If an attack starts
  Get Off the X: move away from the sound of gunfire or the threat vector. Get low, move to solid cover, or barricade in a room with a locking door.

• Help, but don’t get stuck
  Guide children, elderly, and disabled out if you can — but don’t freeze over one decision point. Escape first, render aid only if the area is safe enough to stay.

• If you carry concealed and your church allows it
  Stay discreet. You’re not there to posture. Your weapon is a last resort to stop imminent death or serious injury — not to chase suspects or “hold the perimeter.”

🧑‍💼 FOR CHURCH STAFF — ORDER IN THE CHAOS

Pastors and staff don’t have to be tacticians — they have to be organized.

• Control the doors
  Once service starts, lock unused exterior doors. Keep one or two monitored entrances only, with trained greeters who know what “off” looks like.

• Write a one-page Emergency Action Plan
  Cover four basics:

  • Active attacker

  • Medical emergency

  • Fire

  • Severe weather

• Assign clear roles

  • Who calls 911?

  • Who speaks from the platform or mic?

  • Who is responsible for children’s areas and nursery?

  • Who meets and guides arriving police?

• Practice light, practice often
  Do a simple 15-minute tabletop after service: “If something happens right now, who does what?” Repeat quarterly.

• Know your local cops
  Invite local law enforcement for a walk-through, share your floor plan, ask for recommendations, and get them familiar with your building before something goes wrong.

👮‍♂️ FOR SECURITY / SAFETY TEAMS — SHEEPDOGS ON DUTY

You don’t need body armor and plate carriers. You need roles, radios, and reps.

• Build around core positions
  

  • Team Lead (command / radio)

  • Perimeter (parking and outside)

  • Entry (doors / lobby)

  • Interior (sanctuary / stage)

  • Medical (trauma kit, AED, 911 interface)

• Gear that matters
  Radios with earpieces, clearly marked trauma kits and IFAKs, flashlights, spare phone batteries, and printed floor plans.

• Concealed carry integration
  

  • Only vetted, background-checked, and trained individuals.

  • Written policy on caliber, holsters, and where they sit/stand.

  • Quarterly training on use-of-force law, shoot / don’t-shoot, and trauma care.

• Simple SOPs over tacticool fantasies
  Define:
  

  • How to challenge suspicious behavior (two-person contact).

  • How to lock down children’s areas.

  • How to handle an angry spouse, custody dispute, or mentally unstable visitor without overreaction.

🛡️ SELF-DEFENSE (LAST RESORT IN THE PEW)

Use of force is the last tool, not the first. Laws vary by state — your entire team must know your jurisdiction’s rules (duty to retreat vs. stand-your-ground, defense of others, brandishing).

• Imminent lethal threat only
  Use deadly force only when you reasonably believe you or others face imminent death or serious bodily injury. Property or hurt feelings don’t qualify.

• Avoid, break contact, escape
  Distance and cover are your best defense. Move people away from the threat whenever possible.

• De-escalate early
  Calm voice, non-threatening posture, space to back out. Many incidents can be defused before they become a fight.

• Proportionality
  Use only the level of force needed to stop the threat. Cease immediately once the attacker is disarmed, immobilized, or flees.

• If you carry legally

  • Maintain strict trigger and muzzle discipline.

  • Never fire warning shots.

  • Don’t chase suspects off church property — that’s how you get killed or arrested.

• 911 first, statements later

  • Call 911 as soon as it’s safe: location, number of injured, description of attacker(s).

  • When police arrive, holster or set down weapons if safe, hands visible, follow commands.

  • Ask for medical attention if needed and request legal counsel before detailed statements.

Get the POC-1 Ultras for only $399 for two radios and no annual fee for LTE network service for the life of the radios. This price is only for the first 1,000 units sold. After that they’ll be $1,140 a pair, and $29 to $65 a year for LTE service.

Get them HERE.

🔊 FEATURED OFFER / GEAR BLOCK

Preparedness Essentials — Partners We Trust

Why here: in a real church attack, comms and trauma care save more lives than Instagram posts.

👉 Consider vetted options for training tools (Mantis), legal defense (CCWSafe), carry/EDC (Vertx), and protective equipment (Maverick Tactical).

🛰️ WHAT TO WATCH — OPERATIONAL INDICATORS

• Individuals repeatedly visiting the property during off-hours, filming cameras and entrances.

• Unattended bags or boxes left near doors, lobbies, or the stage.

• Social posts threatening the church over sermons, political stands, or public witness.

• Domestic disputes, restraining orders, or known mental-health crises connected to church attendees.

• Vehicles parking close to entrances, idling, or circling the lot during services.

👮‍♂️ FOR LAW ENFORCEMENT & FIRST RESPONDERS — PUBLIC-SAFE REMINDERS

• Know your churches
  Build relationships with local pastors and safety leads. Walk the property, mark entry points, and make sure dispatch has current site maps.

• Train joint response
  Run simple tabletop exercises with church safety teams: active attacker, medical surge, and family reunification. Clarify roles and communications.

• Encourage realistic readiness
  When churches ask, steer them toward practical steps: doors, radios, trauma gear, policy — not cosplay.

• Post-incident care
  Be prepared for spiritual and psychological fallout after an incident. Work with chaplains and community orgs to stabilize the flock.

INFORMATION IS SURVIVAL…

Free subscribers get the headlines. Guardians get the intel – private Signal channels, emergency alerts, and direct access to our team. When things go bad, which one do you want your family and friends to be?

Upgrade to GUARDIAN

🧠 SDN ANALYSIS — JON WHEATON

The church is more than four walls and a steeple — it’s a symbol of the Kingdom in a world that hates the King. That’s why attackers love it: high impact, low resistance, and maximum shock value. You can’t change the hatred, but you can change the odds. A few radios, some tourniquets, locked side doors, and a handful of trained sheepdogs willing to step toward the sound of danger — that’s the difference between a massacre and a miracle.

Faith doesn’t mean pretending evil isn’t real. Faith means seeing evil clearly, preparing wisely, and standing your ground anyway.

GodSpeed
Jon Wheaton

Cybersecurity firm Proofpoint has confirmed a coordinated wave of cyber-enabled cargo theft hitting U.S. trucking and logistics companies, using Remote Monitoring and Management (RMM) tools to hijack freight in real time.

Threat clusters active since at least June 2025 are working with organized crime to steal physical loads—especially food and beverage cargo, a direct hit on national resilience.

This is the new face of asymmetric warfare: take over trucks, not planes; crash supply chains, not skyscrapers.

You cannot stop this at the grocery aisle. You beat it with local redundancy, hardened fleets, and community-level resilience before the shock hits.

Buy Us A Coffee

Keep reading below …

DISCLOSURE: This post contains affiliate links. If you make a purchase through them, we may earn a small commission at no extra cost to you. This helps keep our work independent. Thank you for your support.

📡 CONTEXT

Proofpoint’s latest threat insight confirms what we’ve been warning for months: cybercriminals—and the networks behind them—have shifted from stealing data to stealing real-world freight. Since at least June 2025, attackers have been infiltrating trucking carriers, freight brokers, and logistics providers with weaponized RMM tools (ScreenConnect, SimpleHelp, PDQ Connect, Fleetdeck, LogMeIn Resolve, N-able), then using that access to bid on real loads and reroute shipments for theft. Cargo theft already drains tens of billions annually; now, with cyber in the mix, the thieves are going after the digital nervous system of U.S. logistics.

⚠️ THREAT PROFILE

What this attack wave actually looks like on the ground:

Infiltration Method
Attackers impersonate brokers or use hijacked accounts to send phishing emails and malicious URLs to carriers and brokers. Those links drop “legit” RMM installers—signed, trusted software—so security tools don’t scream. Once installed, the threat actor has live remote access into dispatch and load systems.

Hybrid Cyber + Physical Theft
This isn’t just stealing logins. Proofpoint assesses with high confidence that these clusters are working with organized crime groups: they use digital access to bid on high-value loads, alter bookings, kill dispatcher alerts, and reroute trucks so real crews show up to move cargo straight into the black market.

Target Profile
Mid-size trucking carriers without mature cybersecurity.

Warehouse and cross-dock hubs running outdated firewalls and exposed IoT gear.

Freight brokers and subcontractors using email + load boards as their primary workflow.

What They’re Stealing
Food, beverages, consumer goods, electronics—high-turn, easy-to-resell cargo—exactly the commodities that keep shelves stocked and people calm.

Strategic End State
Make money and prove a point: that America’s lifeline can be choked digitally. You don’t have to crater a building if you can quietly starve a city block.

STAND WITH THE MISSION...

If you rely on our SITREPs and ThreatWire briefings to stay ahead of what’s coming, upgrade to Guardian today. Your support keeps SDN independent and our intelligence flowing – no filters, no sponsors, no censorship.

Get Full Intel Access

🧍‍♂️ FOR EVERYDAY AMERICANS — PRACTICAL STEPS

You can’t patch a trucking TMS from your kitchen table—but you can harden your own life against logistics shock.

Plan for “no trucks = no stock”
Trucks move ~70% of U.S. freight and carry the first/last miles for most food and essentials. Most stores start to feel shortages in 2–3 days if resupply stops.

Build a 2–4 week buffer
Staples: rice, beans, oats, pasta, oil, salt, canned proteins, shelf-stable milk.
Criticals: prescriptions, hygiene items, baby supplies, pet food.

Think “local, not Amazon”
Map nearby sources: farm stands, co-ops, church pantries, local butchers. If long-haul breaks, local lanes and direct-from-source become your emergency supply chain.

Form a resilience circle
Trade skills: one neighbor has tools, another has garden space, another has comms. Practice “what if trucks stop for a week?” as a tabletop, not a panic.

Watch your info diet
During disruptions, ignore rumor screenshots and anonymous “whistleblower” posts. Follow state DOT, major carriers, and local emergency management for actual status updates.

Get the POC-1 Ultras for only $399 for two radios and no annual fee for LTE network service for the life of the radios. This price is only for the first 1,000 units sold. After that they’ll be $1,140 a pair, and $29 to $65 a year for LTE service.

Get them HERE.

🔊 FEATURED OFFER / GEAR BLOCK

Preparedness Essentials — Partners We Trust

Why here: when logistics go dark, comms, power, and medical are your lifelines while shelves catch up.

👉 Consider vetted options for training tools (Mantis), legal defense (CCWSafe), carry/EDC (Vertx), and protective equipment

👮‍♂️ FOR BUSINESSES — PUBLIC-SAFE ACTIONS (FLEETS, BROKERS, WAREHOUSES)

If you move freight, you are now a frontline target. You don’t have to be perfect—you have to be harder than the next guy.

Tighten Email & Load-Board Hygiene
Train staff that setup packets, load offers, and “urgent updates” can be attack vectors. No one installs RMM or clicks an MSI/exe from an email without verification and a second set of eyes.

Lock Down RMM
Inventory every remote tool you actually use. Remove everything else.
Restrict RMM access to whitelisted IPs, use MFA, and log all sessions. If you don’t have a documented use case for it, it doesn’t belong on a dispatcher’s machine.

Segment & Back Up
Keep dispatch, finance, and warehouse systems segmented. Regular, offline-tested backups mean an intrusion is painful—not fatal.

Know Your “Normal”
Baseline: usual lanes, usual shippers, usual brokers, usual rates. Red flags: unusual high-value loads, new counterparties with rushed timelines, changes to pickup/delivery that bypass normal checkpoints.

Partner with Carriers on Security
Include basic cyber standards in contracts: patching, MFA, incident notification. If you’re the broker and your carrier gets popped, your freight is just as gone.

🛰️ WHAT TO WATCH — OPERATIONAL INDICATORS

Spike in “setup packet” or freight-offer emails asking staff to install RMM, open MSI installers, or log into new portals.

Unusual routing changes, canceled bookings, or dispatcher alerts suddenly going quiet mid-day.

Clusters of cargo thefts involving full trailer disappearance or “ghost carriers” who never deliver.

FBI/DHS, NICB, or industry alerts explicitly tying RMM abuse to freight theft campaigns.

👮‍♂️ FOR LAW ENFORCEMENT — PUBLIC-SAFE REMINDERS

You’re not just dealing with stolen pallets; you’re dealing with critical infrastructure attacks by proxy.

Treat This as CI, Not “Just Cargo Theft”
Food, fuel, and medical freight are Tier-1 lifeline goods. A rash of targeted thefts or hijacked routes is not ordinary crime; it’s a potential national-security precursor.

Work Fusion, Not Just Patrol
Loop in fusion centers and federal partners when you see:

• regional spikes in full-load theft;

• repeated victimization of the same carrier corridors;

• digital compromise indicators (odd routing, fake carriers, spoofed brokers).

Encourage Early Reporting
Most small fleets fear insurance hikes and reputational damage. Emphasize intel value and potential pattern disruption to encourage timely reporting of suspicious digital activity, not just stolen trailers.

Train on RMM & Load-Board TTPs
Make sure investigators know the basics: load boards, broker/carrier relationships, common RMM names. If a detective doesn’t recognize “ScreenConnect” or “SimpleHelp,” they’re already behind.

INFORMATION IS SURVIVAL...
Free subscribers get the headlines. Guardians get the intel – private Signal channels, emergency alerts, and direct access to our team. When things go bad, which one do you want your family and friends to be?

Upgrade to GUARDIAN

🧠 SDN ANALYSIS — JON WHEATON

This is the evolution we’ve been warning about: cyber-enabled soft sabotage. You don’t need hijacked jets when you can hijack the trucks that feed a region. You don’t need to bomb a refinery if you can quietly make the fuel stop arriving. Proofpoint just put hard intel behind the theory—remote access, real cargo, and organized crime at scale.

If 9/11 2.0 comes, I believe supply chains are the second wave — maybe even the first. The answer isn’t panic; it’s preparedness: local redundancy, hardened logistics, and communities that can ride out weeks of disruption without turning on each other. Stock what you can, build the networks you need, and stop assuming “just-in-time” will always arrive just in time.

GodSpeed
Jon Wheaton