Al-Qaeda Twenty-Five Years After 9/11: A Changing Network, a Changing Security Challenge

This article revisits al-Qaeda 25 years after the September 11 attacks and examines how the organization’s modus operandi has reshaped after years of sustained counterterrorism pressure. Al-Qaeda’s central base remains less central to the network’s day-to-day functioning than in 2001, and regional affiliates are now able to exploit local political economies, porous borders, and emerging technologies with less dependence on a central node, changing the network’s internal balance across Somalia, the Sahel, Yemen, and Afghanistan. Although al-Qaeda’s capabilities are increasingly visible, its strategic intent within the post-9/11 era is more opaque, creating a growing intelligence blind spot that security analysis alone cannot address.

---

Twenty-five years after 9/11, al-Qaeda is weaker at the center but stronger at the edges.

The organization that planned the attacks of 2001 depended heavily on a recognizable sanctuary in Afghanistan, central leadership, training infrastructure, and financial networks that became primary targets of the ensuing War on Terror. That campaign succeeded in dismantling much of the organization that conducted 9/11, but it didn’t destroy the movement around it. Instead, sustained military pressure pushed al-Qaeda towards a model that delegated responsibility to regional affiliates embedded within their very own conflicts, economies, and populations.

After Usama bin Laden (UBL), Ayman al-Zawahiri inherited a wounded al-Qaeda and kept it alive by making the organization less dependent on one battlefield, one leader, or one center of gravity. Al-Qaeda Central is weaker than it was in 2001. However, its affiliates within this decentralized network are arguably working in the group’s favor by sustaining the ideology through a collective web that supersedes the hard-power tactics that the War on Terror illustrated as successful. Political scientist Barak Mendelsohn describes al-Zawahiri’s response as one of greater decentralization, acceptance of affiliates’ local priorities, efforts to build local appeal, and an attempt to reduce the incentive for the U.S. to concentrate resources against al-Qaeda.

The result of this 25 years later is a network whose fragmentation has become part of its survivability. The United Nations assessed in 2025 that al-Qaeda Central remained weak while its affiliates operated “largely autonomously,” co-opting local grievances and extending territorial control across parts of Africa and Syria. But in February 2026, UN monitors described the wider threat from al-Qaeda and the Islamic State as multipolar, complex, and lacking a single theater functioning as the clear center of global Jihadist activity. This created the post 9/11 paradox that, though degraded, the central organization responsible for the attacks has learned how to survive without recreating the same architecture that made al-Qaeda vulnerable in the first place.

Usama bin Laden’s al-Qaeda was driven by his charisma, ambition, and a complex profile of a wealthy Saudi businessman turned revolutionary. Sara Harmouch notes that bin Laden “fused theological grievance with personal magnetism to rally Arab fighters into global jihad.” Under UBL, al-Qaeda was exclusive, as it revolved around a small, centralized core built around trust and privacy. The foundations of UBL’s al-Qaeda consisted of affiliate formation and channels of communication, which allowed the network to reproduce beyond its Afghan base.

Al-Zawahiri inherited a different organization. He changed its chemistry, ruling through doctrine and ensuring the group’s survival by emphasizing restraint. Sustained U.S. counterterrorism pressure accelerated al-Qaeda’s decentralization, forcing its senior leadership underground while giving regional affiliates greater operational autonomy. It was al-Zawahiri who encouraged those branches to embed locally, build tribal and community ties, and pursue insurgent governance. The model kept al-Qaeda alive and allowed some affiliates to expand but weakened the center’s operational relevance. Al-Zawahiri increasingly provided broad strategic guidance while regional leaders ran day-to-day operations. By his death in 2022, al-Qaeda remained intact but strategically subdued, having affiliates across several regions with their own leadership structures, recruitment pools, local objectives, and sources of revenue.

Today, Sayf al-Adel is al-Qaeda’s de facto leader, and he represents a different leadership background. Before joining the early al-Qaeda network, he served as a lieutenant colonel in Egyptian special forces and later provided military and intelligence training to al-Qaeda personnel and affiliated militants in Afghanistan, Pakistan, and Sudan. Al-Adel’s temperament and worldview reflect military organization, tradecraft, and, like al-Zawahiri, patience as a long-range strategist.

According to the U.S. Rewards for Justice program, al-Adel remains based in Iran, and it is worth analyzing how living under the host custody of a Shia state may hobble his authority among Sunni foot soldiers and regional commanders. A Salafi-jihadist movement being led by someone under house arrest or controlled movement by Iran could create legitimacy issues. The capabilities necessary for organizational survival, concentrated inward under bin Laden and dispersed under al-Zawahiri, have migrated outward by the al-Adel era into a more professionalized organization designed to endure.

The Afghan-based al-Qaeda core itself remains active 25 years after the September 11 attacks. In January 2024, the UN Analytical Support and Sanctions Monitoring Team reported that al-Qaeda had established up to eight new training camps and five madrasas in Afghanistan, along with a weapons stockpile and safe houses facilitating movement between Afghanistan and Iran through Herat, Farah, and Helmand. Two years later, in August 2026, the Monitoring Team assessed that al-Qaeda’s status and strength in Afghanistan remained unchanged, reporting continued ideological guidance, training, and support to the Tehreek-e-Taliban Pakistan (TTP), and identifying a newly established al-Qaeda training camp at Barg-e Matal in Nuristan. The connection to Iran is that these provinces are on the border of Iran where al-Adel is sheltered, and according to the Monitoring Team, have a history of being used to facilitate travel of leaders and members to and from Iran.

Few affiliates illustrate this shift better than al-Shabaab. A 2024 UN Panel of Experts report cited a confidential study finding that al-Shabaab’s income generation remained within about 20 percent of its estimated $163 million in 2019 through 2023, with revenue falling to $144 million in 2022. Other information that the Panel provided placed its 2023 revenue around $150 million. Despite government raids, checkpoint closures, and restrictions on financial accounts that temporarily disrupted revenue collection, the wider system remained in place.

Al-Shabaab’s financial strength comes from how deeply the system is embedded into Somalia’s economy. The group taxes businesses, property, transportation, and commercial goods moving through areas under its influence. Collection through checkpoints, business networks, intelligence, coercion, and the threat of punishment for those who refuse to pay is enforced, thus functioning like an underground tax structure. The U.S. Treasury Department estimates that al-Shabaab generates more than $100 million annually through extortion and affiliated business networks. In March 2024, Treasury sanctioned 16 individuals and entities connected to a laundering network operating across Somalia, Kenya, Uganda, the United Arab Emirates, and Cyprus. More significant to the wider al-Qaeda structure, Treasury has stated that al-Shabaab revenue has been distributed to other al-Qaeda-linked organizations abroad. Thus, money raised inside a local Somali insurgency may not necessarily remain local.

Jama’at Nusrat al-Islam wal-Muslimin (JNIM) presents a similar development in the Sahel where local instability produces resources capable of moving beyond the conflict in which they were originally generated. UN reporting in 2026 described the organization expanding territorial control, imposing a fuel blockade around Bamako, and relying heavily on kidnapping for ransom. An estimated $50 million ransom paid in late 2025 reportedly helped finance JNIM operations, with a portion of that money reaching elements of the wider al-Qaeda network. This changes what the term “affiliate” means. Al-Qaeda’s regional branches historically benefited from the center’s ideological legitimacy, expertise, and transnational connections. Al-Shabaab and JNIM possess revenue systems capable of sustaining operational agility within their own theaters while moving some of those resources outward, making financial dependence no longer the glue that binds the center to the periphery.

Though regional affiliates give al-Qaeda financial and operational resilience, this autonomy also creates ideological friction and strategic divergence. Affiliates may focus almost entirely on local grievances or rivalries. For example, JNIM has concentrated on fighting local military juntas, while al-Shabaab operates heavily within Somalia’s clan dynamics. This localization can dilute al-Qaeda Central’s core global narrative pertaining to U.S. and Western interests.

Hay’at Tahir al-Sham (HTS) is a case of local embedding leading to a break from al-Qaeda Central’s original vision. Originally operating as al-Qaeda’s Syrian franchise Jabhat al-Nusra, the group formally severed ties with al-Qaeda between 2016 and 2017 in Idlib. To consolidate its control, HTS actively suppressed and dismantled al-Qaeda’s remaining loyalist organization in Syria, Hurras al-Din. As the post-9/11 al-Qaeda model is decentralized, it comes with a cost of ideological coherence and strategic utility, as HTS did, which creates the risk of the al-Qaeda name becoming more of a brand name for insurgencies carried out by its affiliates rather than a global unified campaign.

This tension is also visible in Yemen, which is home to al-Qaeda in the Arabian Peninsula (AQAP), which was referred to as al-Qaeda’s “most aggressive subgroup” in the Trump Administration’s May 2026 U.S. Counterterrorism Strategy. Historically Al-Qaeda’s most aggressive branch dedicated to striking the “Far Enemy,” AQAP has increasingly been pulled into local tribal dynamics, counter-Houthi sectarian warfare, and internal governance issues. To stay locally relevant amid Yemen’s civil war, AQAP shifted its focus inward, thus illustrating how local survival imperatives gradually erode an affiliate’s appetite for international terror plots.

Autonomy is not evidence that affiliates are preparing kinetic operations, but in having it, affiliates become more agile and capable of acting if priorities change, creating more strategic optionality. Westpoint’s Combatting Terrorism Center (CTC) warns that al-Qaeda’s ability to inspire or direct Western attacks has fallen sharply; its most recent Western attack tied to the network was Pensacola in 2019. Currently, ISIS has substantially greater mobilizing power among would-be attackers. At the same time, CTC motions that low attack tempo should not automatically be interpreted as absence of intent.

Following the September 11 attacks, al-Qaeda rapidly evolved its communications to evade global signals intelligence, shifting from vulnerable satellite phones to highly secure encrypted messaging frameworks. Early post-9/11 operations relied on steganography, the practice of concealing information within another file or medium, and structured “cyberplanning” websites like alneda.com to maintain plausible deniability. By 2008, researchers at West Point’s CTC estimated that al-Qaeda operated approximately 5,600 websites, spanning forums, chat rooms, electronic boards, and blogs, with hundreds of new sites appearing each year. The group capitalized heavily on commercial, end-to-end encrypted messaging applications. Al-Qaeda leadership, like ISIS, utilized platforms like Telegram to securely interact with journalists and disseminate news.

Intelligence leaks exposed that Western agencies could occasionally intercept high-level communications, such as the critical plot intercepted between al-Zawahri and Yemen-based chief Nasser al-Wuhayshi, which contributed to the closure of U.S. diplomatic facilities across the Middle East and Africa. Decentralization makes these leaks less likely because affiliates can operate more independently and communicate less often with al-Qaeda Central. Today, borders and distance will not block an ideology from spreading, reducing the importance of physical proximity and making al-Qaeda’s decentralized structure easier to sustain.

In the realm of propaganda and aerial technology, al-Qaeda and its global affiliates created a symbiotic relationship between media outreach and physical drone countermeasures. On the media front, the group established production wings like the al-Kata’ib Media Foundation, which historically built a digital footprint to distribute multi-language video statements and magazines, such as the English-language publication Inspire. Interestingly, while U.S. counterterrorism forces heavily deployed UAVs to eliminate senior al-Qaeda commanders in Pakistan and the Arabian Peninsula, empirical research published by the West Point CTC and associated journals indicates that drone strikes failed to degrade al-Qaeda’s propaganda output, as the group’s media machinery adapted seamlessly to the attacks.

For example, JNIM acquires commercial, off-the-shelf drones through porous borders and weak import controls in West Africa, primarily using Chinese-made DJI drones including the Mavic series, Matrice, and M30T models, according to Armed Conflict Location & Event Data (ACLED). Since JNIM began using drones in 2023, 100 cases of drone violence involving the group have been recorded. JNIM relies especially on the DJI M30T drone, which is capable of a dual-explosive deployment, but does not tend to conduct kamikaze drone attacks. Currently, al-Qaeda actively weaponizes the existence of Western drones, dedicating entire issues of the Inspire magazine to framing drone warfare as “cowardly” and using civilian casualty narratives to drive homegrown radicalization and foreign fighter recruitment. Al-Qaeda cells developed sophisticated, localized counter-drone tactics, which included distributing training manuals, a cache recovered in Mali detailed dozens of steps for evading drone attacks, conducting research on jamming GPS signals, and executing infrared chip spoofing.

AI extends this process by making existing capabilities cheaper, faster, and easier to reproduce. Generative tools can produce synthetic materials (images, videos, translations, recruitment material) and deepfakes designed to manipulate perceptions. A 2025 UN report found that al-Shabaab had released messages translated into multiple languages using AI tools, while the International Centre for Counter-Terrorism (ICCT) has documented pro-al-Qaeda outlets using likely AI-generated imagery and experimenting with generative AI for propaganda. For geographically dispersed groups such as those named above, these tools reduce the personnel and time required to adapt material for different audiences.

Generative AI does not turn a weak organization into a capable one; it can make an already capable organization more efficient. The UK’s Independent Review of Terrorism Legislation by Jonathan Hall K.C. similarly assessed that generative AI could support target research and technical problem-solving while describing the likely gains as incremental. Recent testing has shown that safeguards on public models can sometimes be circumvented. To add, religious debates over AI-generated human imagery, concerns about misinformation, hallucinations, and operational security also limit how far jihadist organizations are likely to delegate decisions to automated systems. The greater significance for al-Qaeda is that affiliates need fewer specialized people, less time, and less support from a central organization to perform tasks that once required greater institutional capacity.

In surviving 25 years of Western counterterrorism, al-Qaeda evolved into something UBL likely would not recognize today. From Saif al-Adel’s coordination from within Iran to JNIM’s consolidation across the Sahel and AQAP’s renewed media outreach in Yemen, al-Qaeda’s adaptability lies in its ability to weaponize instability and ambiguity itself. Affiliates that can finance themselves, communicate securely, exploit commercial technology, and operate within local political ecosystems require less direction from a central command, which creates a challenging intelligence problem.

In an era dominated by great power competition, it makes sense as to why the al-Qaeda model became decentralized. Western military efforts pivoted focus away from counterterrorism and toward state actors, which allowed the organization’s local autonomy to expand in vacuum zones like the Sahel without triggering major Western military interventions.

Security analysis is strong at measuring what al-Qaeda can do, not necessarily what it ultimately wants to do. The West has become extraordinarily skilled at finding terrorists, but finding terrorists and ending terrorism are not the same thing. In 1799, George Washington wrote that offensive operations could sometimes be the “surest” means of defense. Even today, nearly 230 years later, that logic still matters, but offense cannot substitute for understanding. A network built to survive without a single center cannot be defeated by continually searching for one.

Twenty-five years after 9/11, the intelligence challenge is understanding the relationships, grievances, economies, and ambitions that allow the network to regenerate after each tactical loss—a challenge that requires a blend of hard power to be paired with cultural fluency, local knowledge, and human understanding. Al-Qaeda survived by becoming less like the organization the United States went to war against and more like the environments in which its affiliates operate. Counterterrorism cannot afford to keep fighting the al-Qaeda of September 11, 2001. It must understand the al-Qaeda that survived it.