Every intelligence assessment begins with an assumption. Most are
necessary. Some become dangerous. Once an assessment becomes widely
accepted, new information is often interpreted through that existing
framework rather than used to test it. Analysts are human. Institutions
are human. We naturally place greater weight on evidence that confirms
what we already believe while discounting information that challenges
it. That tendency is understandable. It is also one of the primary
reasons strategic surprise remains so common.
The most damaging intelligence failures are rarely caused by missing
information. More often, they occur because organizations remain
anchored to an assessment long after the threat itself has changed. Good
intelligence requires more than collecting new information. It requires
the discipline to recognize when the evidence no longer fits the
prevailing assessment.
Last September, I published Hamza bin Laden: Know Thy Enemy,
reporting that Hamza bin Laden had survived, was operating from
Afghanistan, and had assumed leadership of Al-Qaeda. At the time, that
assessment differed sharply from the prevailing public understanding of
the organization’s leadership. Whether readers accepted that conclusion
was almost beside the point. The more important question was whether the
broader body of intelligence surrounding Al-Qaeda’s recent operations
supported the existing consensus or pointed toward a different one.
Since then, that question has only become more important. Multiple
investigations examining terrorist activity across Afghanistan, the
Middle East, Africa, Europe, and continued external plotting directed
toward the United States have repeatedly pointed toward the same
leadership, the same strategic direction, and the same effort to rebuild
Al-Qaeda’s ability to coordinate operations across multiple theaters.
Those developments suggest more than isolated terrorist attacks. They
suggest an organization operating with increasing coordination and
strategic purpose.
If that assessment is correct, then the implications extend well
beyond one individual. Leadership assessments shape what intelligence
agencies collect, what analysts prioritize, and how policymakers
understand the threat. An inaccurate assessment at the top of an
organization can produce blind spots that influence every stage of the
intelligence process.
This article is not an attempt to relitigate last year’s reporting.
It is an examination of what has happened since. The question is no
longer simply whether Hamza bin Laden survived. It is whether the
evidence accumulated over the past year still supports the prevailing
assessment, or whether it is time to reconsider it.
A Pattern, Not an Isolated
Operation
One of the easiest mistakes to make when studying terrorism is
treating every attack as an independent event. Headlines encourage that
approach. One week the focus is Somalia. The next it shifts to Syria,
Europe, or the homeland. Each incident is reported, debated for a few
days, and then largely forgotten as the news cycle moves on.
Intelligence demands a different perspective. Rather than viewing
attacks in isolation, analysts look for the connections that reveal
whether seemingly unrelated events are actually part of the same
campaign.
Professional terrorist organizations do not simply react to
opportunities as they arise. They establish priorities, allocate
resources, select commanders, reinforce successful affiliates, and shift
personnel between theaters to support broader strategic objectives.
Those decisions are rarely visible in a single operation. They become
clear only when multiple streams of intelligence begin pointing toward
the same leadership, the same infrastructure, and the same operational
objectives.
That is the picture that has emerged across the investigations
informing this article.
According to information developed during those investigations, Hamza
bin Laden’s role extends well beyond symbolic leadership or ideological
messaging. The reporting instead points to active involvement in
directing or supporting campaigns spanning multiple continents and
several Al-Qaeda affiliates.
In Afghanistan, the reporting places Hamza inside the country’s
renewed terrorist sanctuary as Al-Qaeda rebuilt its external
capabilities. From that base, the organization has reportedly expanded
training, restored relationships with long-standing allies, and
reestablished the command structure needed to coordinate operations
beyond South Asia.
The same reporting links Hamza to preparations supporting the
offensive that rapidly reshaped Syria’s battlefield, including efforts
to expand terrorist training for foreign fighters before the campaign
accelerated. Other investigations identified his reported role in
reinforcing Al-Qaeda-aligned networks in Somalia while facilitating
support to extremist elements in Libya and Mali. These are
geographically separate conflicts, but they share an important
characteristic: each strengthens Al-Qaeda’s broader global
infrastructure rather than serving only local objectives.
The same pattern extends beyond active conflict zones. Investigations
examining terrorist planning tied to Europe, continued threats against
the U.S. homeland, and the planning that preceded the October 7 attacks
all point toward the same recurring leadership figure. Standing alone,
any one of those investigations could be dismissed as an isolated
allegation. Viewed together, they raise a much larger analytical
question.
Intelligence is rarely built on a single source or investigation.
Confidence grows when independent reporting, collected across different
regions and at different times, repeatedly identifies the same
individual performing the same leadership role. That does not eliminate
uncertainty, nor should it. But it does require analysts to ask whether
the cumulative evidence points toward a conclusion that deserves to be
reexamined.
That is why the central question is no longer whether one operation
can be attributed to Hamza bin Laden. It is whether so many operations,
spanning multiple theaters and multiple affiliates, continue pointing
toward the same individual by coincidence, or because they are part of a
coordinated campaign directed from the same leadership.
What Has Changed Inside
Al-Qaeda?
One of the most persistent misconceptions surrounding Al-Qaeda is
that it remains largely the organization the United States confronted
after September 11. Leadership losses, years of counterterrorism
pressure, and the rise of ISIS created the impression that Al-Qaeda had
become fragmented, increasingly regional, and focused more on survival
than strategic planning. That assessment was accurate for a time. The
question is whether it still reflects the organization today.
The evidence now points in a different direction. Rather than
prioritizing spectacular attacks designed primarily for propaganda,
Al-Qaeda appears to be rebuilding the patient, methodical approach that
once made it exceptionally dangerous. The emphasis is no longer simply
on demonstrating capability. It is on rebuilding capability.
That shift is visible across multiple theaters.
According to information developed during these investigations,
Al-Qaeda has invested heavily in rebuilding training infrastructure
inside Afghanistan, creating the conditions to prepare larger numbers of
foreign fighters while restoring relationships with long-standing
allies. At the same time, reinforcements, trainers, and operational
expertise have reportedly flowed to affiliates and partner organizations
in Syria, Somalia, Libya, and Mali, strengthening networks that were
once viewed primarily as separate regional conflicts.
Viewed individually, these developments may appear unrelated. Viewed
together, they suggest something far more deliberate: an effort to
strengthen Al-Qaeda’s global architecture rather than concentrating
resources in a single theater.
The same evolution is evident in target selection. Reporting
associated with Hamza bin Laden has repeatedly involved military
installations, government facilities, aviation, and other strategically
significant targets. These are not attacks chosen solely for media
attention. They are selected to expose security vulnerabilities,
undermine governments, and produce effects far beyond the immediate
casualties. That reflects a more disciplined approach than the
opportunistic violence often associated with decentralized terrorist
organizations.
Equally significant is the apparent coordination across regions.
Afghanistan remains Al-Qaeda’s strategic center of gravity, but its
operational reach extends well beyond South Asia. Leadership decisions
have reportedly influenced activity in the Middle East, East Africa,
North Africa, Europe, and continued external plotting directed toward
the United States. Each affiliate continues pursuing local objectives,
yet the broader picture suggests increasing strategic coordination
behind those efforts.
This distinction matters. A decentralized movement presents one set
of challenges. A network of regional affiliates operating under
increasingly centralized leadership presents another. That difference
influences how intelligence agencies prioritize collection, how
policymakers assess risk, and ultimately how governments prepare for the
threat.
The most important change inside Al-Qaeda may not be who leads the
organization. It is that the organization itself appears to be moving
beyond survival and back toward coordinated global campaigning. If that
assessment is correct, it deserves far greater analytical attention than
it has received.
The Cost of an
Intelligence Blind Spot
Leadership assessments are never academic exercises. They shape what
governments collect, what analysts prioritize, where resources are
directed, and ultimately how nations prepare for future threats. If the
assessment at the center of that process is wrong, the consequences
extend far beyond a single intelligence judgment.
That is why this discussion extends beyond Hamza bin Laden. The
central question is whether Al-Qaeda is being assessed as the
organization it is today rather than the organization it has become
since the Taliban returned to power. If its leadership has reestablished
centralized planning from Afghanistan, rebuilt training infrastructure,
strengthened relationships with regional affiliates, and resumed
coordinating external operations, then continuing to analyze it
primarily as a decentralized movement risks misjudging both its
capabilities and its intentions.
The assessment itself also deserves scrutiny. Terrorist organizations
have long understood that deceiving their adversaries about leadership
can be just as valuable as concealing a training camp or weapons cache.
A successful deception operation buys time, protects senior leaders, and
shifts attention elsewhere.
According to information developed during my investigations, that
appears to be exactly what Al-Qaeda has done. The same senior leadership
associated with the narrative surrounding Hamza bin Laden also
participated in efforts to obscure the operational status of other key
figures, including Saad bin Laden and Abu Jihad al-Masri, while
continuing to support external operations. If those findings are
accurate, they suggest leadership deception is not an isolated tactic
but a core element of Al-Qaeda’s operational tradecraft.
Once an assessment becomes widely accepted, it naturally shapes the
analysis that follows. New reporting is often measured against the
existing assessment instead of the assessment being tested against new
reporting. Over time, analytical momentum can become more influential
than the evidence itself.
That brings us to a straightforward intelligence question. Are the
reported activities in Afghanistan, Syria, Somalia, Libya, Mali, Europe,
and continued external plotting directed toward the United States
independent regional developments, or do they reflect increasingly
centralized leadership operating from a renewed sanctuary in
Afghanistan?
That question deserves sustained analytical scrutiny. Not because it
validates one conclusion over another, but because intelligence is
strongest when assumptions are continually tested against new evidence
rather than consensus becoming a substitute for analysis.
Looking Beyond Yesterday’s
Assessment
This discussion is not simply about whether Hamza bin Laden survived.
It is about whether we are accurately assessing how Al-Qaeda has evolved
since the Taliban returned to power in Afghanistan. Leadership matters
because leadership shapes strategy. Strategy shapes operations.
Operations shape the threats our military, intelligence professionals,
law enforcement agencies, and allies must confront.
The pattern that has emerged over the past year points toward an
organization that is doing far more than surviving. Across multiple
theaters, Al-Qaeda appears to be rebuilding its external capabilities,
strengthening regional affiliates, expanding its training
infrastructure, and coordinating operations with greater discipline than
many continue to acknowledge. Those are not the characteristics of an
organization in decline. They are the characteristics of an organization
preparing for the future.
History also reminds us that Al-Qaeda has long viewed deception as a
strategic weapon. Concealing leadership, obscuring succession, and
shaping an adversary’s understanding of the battlefield are not new
tactics. They are part of the organization’s tradecraft. If that history
teaches us anything, it is that long-held assessments deserve to be
tested continually against new reporting rather than accepted simply
because they have become familiar.
Our adversaries are constantly adapting. They study our priorities,
identify our blind spots, and exploit the assumptions we are least
likely to revisit. They are not constrained by reporting cycles,
bureaucratic processes, or institutional consensus. They care only
whether our understanding of the battlefield reflects reality.
Over the past year, different operations, different countries, and
different investigations have repeatedly pointed toward the same
leadership, the same strategic direction, and the same effort to rebuild
Al-Qaeda’s ability to coordinate operations across multiple theaters. At
some point, the more important question is no longer whether the
evidence should be examined. It is why we remain reluctant to reexamine
the assessment itself.
Intelligence is not about protecting consensus. It is about having
the discipline to change your assessment when the evidence changes.
Because the battlefield does not wait for us to catch up.
Originally published by Sarah Adams. View the original post →