On-the-ground analysis from our security intelligence team, highlighting the threat signals and patterns shaping today’s risk environment that affect organizations and executives.

 

---

What’s Changing This Month

• Global conflict is translating into local risk
  Disruptions are no longer contained to geopolitics—impacts are surfacing in communities, institutions, and operations
• Targeting of Jewish institutions is increasing—and spreading
  Coordinated attacks, extremist activity, and copycat risk are rising in Europe, with potential spillover into North America
• Unrest is becoming more visible and coordinated
  Protest activity is scaling in size and organization, increasing both operational disruption and reputational exposure.

 

---

If You Only Read One Thing

Global conflict is no longer contained—it’s showing up locally. What starts as geopolitical tension is increasingly translating into protests, targeted violence, and heightened risk to institutions and communities.

 

---

What We’re Watching

Key Risks we’re actively monitoring:

 

---

Geopolitical Risk | Strait of Hormuz Disruption
Signal Strength: High

Escalating tensions tied to the Israel–Iran–U.S. war are increasing both strategic and localized security risks.

• Instability in this region poses one of the most significant global risks. Even limited disruption to maritime traffic could impact global energy markets, supply chains, and shipping costs. In remarks delivered on April 1, 2026, Donald Trump emphasized the need for stronger deterrence and a more assertive U.S. posture to ensure freedom of navigation and prevent adversarial control over key chokepoints, reinforcing the Strait’s role as both an economic and strategic flashpoint.

• Geopolitical tensions are contributing to heightened risk outside the Middle East. Recent incidents targeting Jewish institutions in North America highlight how international conflict can translate into risks for diaspora communities. Trump’s April 1 remarks also stressed security against ideologically motivated violence, underscoring the growing convergence between global geopolitical friction and domestic threat environments.

What this means for security leaders:

• Monitor maritime risk indicators: Disruptions in the Strait of Hormuz could quickly impact energy prices, transportation costs, and supply chains.
• Expect heightened risk around Jewish institutions such as synagogues, schools, and community centers may face increased threats.

 

---

Terrorist Risk | Iran-Linked Network Targeting Jewish Institutions in Europe
Signal Strength: High

Building on broader geopolitical spillover, a newly identified militant group—Harakat Ashab al-Yamin al-Islamia—is believed to be linked to Iranian networks and has claimed responsibility for attacks targeting Jewish institutions in Liège, Amsterdam, and Rotterdam.

Multi-city operations in a short timeframe suggest potential for additional attacks. Attacks appear designed to intimidate Jewish communities and expand Iranian-aligned activity beyond the Middle East.

What this means for security leaders:

• Elevated risk to Jewish institutions in Europe: Synagogues, schools, and community centers remain primary targets
• Expansion of proxy activity: Indicates broader Iranian-aligned operations in diaspora communities
• Spillover risk to North America: Similar tactics or influence networks could emerge in the U.S. or Canada

 

---

Domestic Unrest | Economic Blackouts & “No Kings” Protests
Signal Strength: Medium

As of early April 2026, the No Kings movement continues to focus on large scale public demonstrations while pursuing future economic disruptions. The No Kings protests were initially intended for large-scale disruptions. Organizers claimed over 8 million participants across more than 3,300 events nationwide for the March 28 No Kings actions. This included an estimated 200,000 or more at the flagship events in Minneapolis and St. Paul. These figures build on the prior reported turnout of approximately 7 million for the No Kings 2.0 in October 2025.

The demonstrations featured anti-authoritarian messaging such as No thrones, no crowns, no kings, along with opposition to I.C.E. and immigration enforcement and broader discontent with the current administration. Organizing coalitions included: Indivisible, 50501 movement, ACLU, labor affiliated groups, Twin Cities Democratic Socialists of American (D.S.A.) and local union networks.

Indivisbles Co-Founder Ezra Levin stated during the Minneapolis flagship event that the movement’s next national action will be a tactical escalation, an economic show of force, on May 1st, International Workers Day. This action is inspired by the January anti-I.C.E. economic blackouts in Minneapolis.  

• Minneapolis and St. Paul were selected as the flagship event due to the well-coordinated activist networks, labor unions, and D.S.A.- affiliated organizers in Minnesota. These groups demonstrated strong mobilization capacity during the anti-I.C.E. and economic blackout campaigns. Far-left organizations are likely to view this success as an opportunity to shift passive supporters/protestors into long term active support within the broader activist pipeline.

A true nationwide general strike on May 1st remains unlikely. Near-term actions will likely utilize non-violent and friendly techniques like school walkouts, media amplification, and educational content aligned with non cooperation strategies.

What this means for security leaders:

• Visible demonstrations over broad economic disruption: Expect continued protest activity in the near term, with lower risk of a nationwide shutdown, but elevated potential for localized actions, marches, and partial disruptions on May 1st.
• Localized concentration of risk: Activist strongholds, particularly Minneapolis and St. Paul, along with major cities like New York, Los Angeles, Chicago, and Washington D.C., are likely to experience higher levels of activity and possible impacts on traffic, public transit, schools and commerce.
• Potential for re-escalation: May 1st represents a key test of coordination and support for economic pressure tactics. Additional April planning sessions, debriefs (lessons learned from previous actions), and localized actions are already underway and should be monitored.

 

---

 

Physical Security Risk | Michigan Temple Israel Attack
Signal Strength: High

On March 12, Ayman Mohamed Ghazali, 41, carried out a vehicle-ramming and shooting terror attack at Temple Israel in West Bloomfield Township, Michigan, during daytime operations while staff and children were present. He drove a pickup truck into the building, exited the vehicle, and opened fire before being engaged and killed by on-site security.

A vehicle containing explosives caught fire, filling the facility with heavy smoke. One security guard was injured, and dozens of first responders were treated for smoke inhalation. All occupants were safely evacuated.

Current assessment:

• Incident under investigation as a targeted attack
• Potential ideological motives are being assessed
• Scale, visibility, and tactics increase the likelihood of copycat attacks targeting religious and community sites

What this means for security leaders:

• Heightened risk to community and religious sites: Synagogues, churches, schools, and community centers may face increased threats following widespread media coverage.
• Increased likelihood of copycat attacks: Similar incidents (Church of Jesus Christ of Latter-day Saints in Grand Blanc Township, MI, and the January 2026 vehicle-ramming at the Chabad–Lubavitch World Headquarters in Brooklyn, NY) suggest attackers may replicate.
• Need for strengthened coordination and preparedness: Review emergency protocols, coordinate with law enforcement, and monitor for suspicious activity or threat indicators.

 

---

 

What’s Flying Under the Radar?

Physical/Reputational Risk | U.S.-based Anti War Activism
Signal Strength: Low

While attention remains on geopolitical escalation, protest activity is steadily building across the U.S. and globally—mirroring patterns seen in prior conflicts. Opposition to U.S. involvement is driven by anti-war and anti-government sentiment, with activity organized by groups such as the 50501 movement, DSA, Veterans for Peace, WAMM, and AWC.

• Activity overview:
  ~1,000 demonstrations globally since February 28
  ~145 protests across major U.S. cities
  Additional demonstrations at U.S. embassies abroad, including incidents requiring crowd control measures

What this means for security leaders:

• Increased protest activity and targeting: Government-affiliated, Israel-affiliated, and Jewish organizations may face demonstrations, petitions, or vandalism
• Elevated reputational risk: Negative sentiment on social media may impact brand perception and community relationships
• Heightened monitoring and preparedness needs: Increase situational awareness, coordinate with local authorities, and review contingency plans

 

---

 

Analyst Takeaway

“We’re seeing a clear pattern: global events are no longer distant—they’re driving real, localized security risks that require faster, more connected decision-making.”

 

---

 

This report reflects current analysis from the Rozin Security Intelligence Team. If this report would benefit colleagues in your organization, please feel free to circulate it.

For tailored threat intelligence, executive travel briefings, or embedded analytic support, contact the Rozin Security Intelligence Division at info@rozinsecurity.com.