SITREP, June 2026

Dear Reader,

June 2026 has moved fast. The Iran war shifted from active strikes to fragile diplomacy within days, a new Ebola-type outbreak is straining health systems across Central Africa, and anti-immigration riots have returned to the streets of Belfast. Operators across all four covered regions face a higher-than-average threat picture this month.

The Month in Review

Asia & Middle East

Iran. The most recent kinetic exchanges between Israel and Iran occurred on 7-8 June, after which both sides announced a halt to attacks. Attention has since shifted to diplomacy: as of 13 June, President Trump is at the G7 seeking allied support for demining the Strait of Hormuz, which remains closed to commercial shipping. Trump has said a peace agreement could be signed "in the coming days." Iran's Supreme Leader Khamenei was killed during the conflict; his funeral is planned for July. Operators with supply-chain or energy exposure to the Gulf should treat the Strait's status as an active variable and monitor the peace process closely. [1] [2] [3]

Lebanon. On 2 June, President Trump pressed Prime Minister Netanyahu to halt Israeli escalation in Lebanon. Despite the broader Iran halt on 7-8 June, Israel struck areas near Tyre in southern Lebanon on 8 June, and Hezbollah cross-border attacks on northern Israel are continuing. Lebanon is not fully covered by the Iran ceasefire framework. Operators with personnel in or near Beirut should maintain a Relocate posture, not a Hold. [4] [5]

Regional advisories. Stanford University has recommended against all sponsored travel to or through 14 countries through at least 30 June: Israel, Iran, Bahrain, Cyprus, Iraq, Jordan, Kuwait, Lebanon, Oman, Qatar, Saudi Arabia, Syria, Turkey, and UAE. The US State Department currently lists Iran, Iraq, Syria, and Lebanon at Level 4 ("Do Not Travel"). [6] [7]

Americas

Mexico. Following the February killing of CJNG leader Nemesio Oseguera Cervantes in Jalisco, cartel factions launched blockades and burned vehicles across nearly a dozen states. Cartel-related violence has remained at extreme levels and the security environment has not stabilized. The FIFA World Cup places three host venues inside Mexico, including Guadalajara, which is CJNG's primary territory. Operators supporting World Cup logistics or corporate travel to Mexican host cities should implement vehicle hardening protocols and avoid predictable movement patterns. [8] [9]

FIFA World Cup (USA, Canada, Mexico). The tournament opened 11 June and runs through 19 July. No specific credible threat to venues has been confirmed by US intelligence as of the reporting date, but the FBI and DHS have flagged the 3 to 5 July period (World Cup matches coinciding with US Independence Day) as a heightened window for lone-actor and small-cell attacks. CSIS notes that Islamic State affiliates have specifically targeted major sporting events in the past. Close protection and corporate hospitality operators should conduct dry-run venue assessments, brief principals on shelter-in-place procedures, and plan rapid egress routes from fan zones. [10] [11]

Africa

Uganda and DRC: Bundibugyo Virus Disease. A Bundibugyo virus disease outbreak (a type of Ebola) is active across the Democratic Republic of the Congo and Uganda. WHO reports 534 confirmed cases and 93 deaths across both countries as of 6 June; Uganda has separately confirmed 19 cases and 2 deaths as of 11 June. The CDC issued a Level 3 Travel Health Notice for DRC and Level 2 for Uganda; Uganda has closed land border crossings with DRC. The US is currently restricting entry for lawful permanent residents who have been in Uganda within the preceding 21 days. Operators with personnel in or transiting eastern Uganda or eastern DRC must activate outbreak protocols immediately and verify that MEDEVAC and evacuation contracts explicitly cover viral hemorrhagic fever cases. [12] [13] [14]

Sahel and West Africa. The Islamic State has approximately doubled its operational tempo in sub-Saharan Africa over the past year, rising from approximately 111 to 221 incidents. JNIM (Jama'at Nusrat ul-Islam wal-Muslimin) is assessed as the world's second deadliest terrorist group, concentrating activity in Mali, Burkina Faso, Niger, and Benin. A concurrent diphtheria outbreak is active across seven countries in the region: Chad, Guinea, Niger, Nigeria, Mali, Mauritania, and Somalia. Operators planning Sahel deployments should confirm vaccination records are current and request route-level threat assessments before departure. [15] [16] [17]

Europe

Northern Ireland. Anti-immigration riots erupted in Belfast on 9 June after a stabbing allegedly committed by a Sudanese national. Masked groups burned homes and vehicles across the city; approximately 27 people were made homeless as rioters went door-to-door targeting migrant households. Police deployed water cannons, and violence spread to Glasgow, Edinburgh, and Southampton. As of 12 June, tensions remain elevated; thousands have since rallied in Belfast to condemn the unrest. Operators traveling to Belfast or other UK cities with active protest movements should monitor local conditions daily and avoid areas adjacent to demonstrations. [18] [19]

France: Transport Disruptions. France's second national rail strike of 2026 took effect on 10 June, backed by all four major rail unions in protest over working conditions and organizational restructuring. A separate strike at all three Paris airports is planned for 18 June, targeting security clearance policies. Operators transiting France through late June should build a minimum 48-hour buffer into travel itineraries and identify alternative routing via Brussels or Amsterdam. [20]

Mass Gathering Security: Staying Ahead of the Crowd

With the FIFA World Cup underway across three nations and large demonstrations active in Europe, mass gatherings present a distinct operational risk this month. Arrive early: the 30 minutes before and after any large event are the highest-risk window, when crowd density peaks and exit routes compress. Before entering any venue or fan zone, identify and physically walk at least two exit routes rather than planning them only on a map. Maintain a low profile: branded merchandise, sponsor lanyards, and visible credentials mark you to opportunistic thieves and, in rare cases, targeted actors. Keep your phone charged above 50 percent and carry a portable battery, because personal communications are among the first casualties of a crowd incident. If crowd crush develops, move perpendicular to the flow rather than against it, and aim for the venue perimeter where pressure is lowest.

Community Q&A

"We have two staff deployed in eastern Uganda near the DRC border. The Ebola outbreak is on our radar. What is the correct decision framework?"

This warrants a formal Stay/Relocate/Evacuate assessment, not a reactive call. The FOXPEDITION framework applied to this situation:

1. Assess proximity. Confirmed cases in Uganda are geographically concentrated. Determine whether your staff are within 100 km of a confirmed case or a healthcare facility actively handling cases. If yes, treat this as a Relocate trigger pending further assessment.

2. Confirm PPE and protocol readiness. If your organization cannot confirm that staff have appropriate personal protective equipment and are trained in correct donning and doffing procedures, relocation is the correct default posture. Bundibugyo virus disease is a medical emergency, not a risk to be managed around.

3. Check exit options. Uganda has closed land borders with DRC. Commercial air from Entebbe remains available as of the reporting date, but that can change within hours of an escalating outbreak. Verify that MEDEVAC and evacuation contracts explicitly cover viral hemorrhagic fever cases, as many standard policies exclude them by name.

4. Apply the correct standard. The CDC Level 2 notice is calibrated for the general traveler. Operators with personnel embedded near an active outbreak perimeter should apply a more conservative threshold. If the outbreak is expanding and local healthcare system capacity is under stress, move your people out and reassess once trajectory is clearer.

Default to caution. When in doubt about outbreak trajectory, relocate before conditions force the decision.

Subscribers can reply to any issue with a question; some become the next reader Q and A.

From the Team

Podcast: The Safety Huddle by FOXPEDITION.

"Espionage: The Human Factor" (No. 10). Inga Faust in conversation with Alex Bomberg on the human element behind modern espionage and cyber threats, including the MICE framework and practical lessons for protecting organizations against insider risk. Listen on Apple Podcasts, Spotify, or YouTube.

Stay safe out there,

Inga Faust, Co-Founder, FOXPEDITION™