The New Face of Terrorism: How Lone Actors Are Outpacing the System Built for 9/11

The Evolution of a Threat

When I first walked into the Pentagon in March 2002, smoke still rose from the building where American Airlines Flight 77 had crashed nearly two years earlier. It was a surreal moment for me — not just because of the physical scars left behind, but because it marked my entry into a new era of American security, one designed to prevent another attack like 9/11.

For nearly three decades, we built our national security apparatus around the threat that existed in 2001: a complex network of al Qaeda operatives, foreign training, and coordinated international plots. But as the years passed, the nature of terrorism evolved — not just in scale but in form.

"We are safer from a certain type of threat," I often remind people, "but again, we are not immune from terrorism, and other types of threats are much more difficult to identify or stop."

The System That Was Built for the Past

The immediate response to 9/11 was unprecedented. The Department of Homeland Security was created in just months after the attacks, combining 22 federal agencies and offices under one roof. The Transportation Security Administration began screening passengers at airports — a massive undertaking that remains one of the largest civilian operations in U.S. history.

These were necessary steps, but they also created an architecture designed for a specific threat: large-scale, coordinated attacks carried out by trained operatives with access to international networks.

The 9/11 Commission made clear that pre-attack failures weren't just about missing connections between agencies. They stemmed from a fundamental lack of integration and coordination — the failure of any one entity to take full responsibility for intelligence gathering and action across both domestic and foreign lines.

The Quiet Shift

What followed was a decade-long campaign that saw al Qaeda's leadership decimated, its operational networks dismantled, and the group reduced to a shadow of its former self. ISIS emerged as a new force, but even that, in many ways, was a continuation of the same struggle — an attempt to build upon the lessons learned from al Qaeda's decline.

Yet, something crucial changed after 2011, when Osama bin Laden was killed. As his successor continued to inspire, the focus began shifting from organized groups with defined hierarchies to individuals radicalized in isolation through online channels — a phenomenon that made detection and prevention exponentially harder.

The FBI now faces a challenge that has no precedent: identifying someone who hasn't yet committed a crime, who doesn't leave obvious traces of planning, and who might act alone — without direct contact with an overseas network. In many cases, they are already too late to intervene.

When the Enemy Hides in Plain Sight

Consider the attack on New Orleans in January 2025. Shamsud-Din Jabbar, a U.S. citizen from Texas, drove a pickup truck into a crowd of revelers along Bourbon Street, killing 14 people. The FBI described it as an act of terrorism — yet Jabbar had no ties to any global terrorist organization, and he didn't train overseas or receive direct instructions from anyone abroad.

This kind of incident represents a fundamental shift in the way terrorism manifests in America. It's not about flying planes or orchestrating large-scale operations anymore; it's about individuals who feel isolated, radicalized, and emboldened by ideology — often spread through encrypted messaging apps or dark web forums.

The 2026 Annual Threat Assessment from the Office of the Director of National Intelligence confirms this trend. The report states that while al Qaeda and ISIS are still capable of conducting attacks, their ability to plan large-scale complex operations has diminished significantly. They have instead moved toward information warfare, propaganda, and inspiring lone actors.

A System at Risk

The institutions built after 9/11 were meant to be reactive — to collect intelligence, detect threats, and prevent attacks before they occurred. But the new breed of threat is inherently difficult to track using traditional methods. These individuals often never show up on any watchlist or radar system, leaving law enforcement with little time to act.

That's why the real question today isn't whether we're safer from a 9/11-style attack — because statistically, we are. But rather: what do we do about threats that don't fit our systems?

This is not to say that the work of counterterrorism has stopped. On the contrary, the efforts by agencies like the FBI and the Department of Homeland Security remain vital, but their resources are stretched thin across a broader spectrum of potential dangers — cyber threats, supply chain vulnerabilities, domestic extremists, foreign adversaries who seek to exploit American infrastructure.

Reimagining National Security

Morgan Murphy, former press secretary for the Secretary of Defense under the Trump administration, argues that Washington has over-engineered its approach. He believes we've spent too much time and money creating bureaucratic layers meant to process threats instead of fighting them effectively.

"We spent two decades frisking American passengers while our adversaries plugged themselves into our homes and businesses," Murphy said. "Real security means sovereignty at home and lethality abroad — a sealed border, an untangled supply chain, and enemies who fear us."

Theo Wold, former acting assistant attorney general in the Justice Department's Office of Legal Policy, echoed these concerns. He noted that post-9/11 authorities were often used against Americans rather than for protecting them, and that bureaucratic inefficiencies have plagued the system.

"George W. Bush and the D.C. governing elite responded to 9/11 the way their politics demanded: create large, unwieldy bureaucracy, push for special legal authorities with limited oversight and activate ground wars in the Middle East," Wold said. "Those wars didn't make us safer, the legal authorities were wielded against Americans, and the bureaucracy is full of waste and has proven nearly unworkable."

Preparing for Tomorrow's Threats

As the threats continue to evolve, so must our understanding of how best to combat them. The future will not look like 9/11 — or even like the attacks we've seen since then.

The next generation of threats may come through cyberattacks on critical infrastructure, through disinformation campaigns that erode trust in institutions, or even from artificial intelligence-powered tools designed to automate surveillance and manipulation. These aren't just technical challenges; they're existential ones for democratic societies.

I've spent years working alongside former counterterrorism officials like Javed Ali, who now teaches at the University of Michigan. We agree that while we cannot prevent all attacks, we must maintain vigilance and ensure our systems are adaptable enough to evolve with the changing nature of threats.

One lesson from 9/11 was clear: emerging threats need to be confronted before they gather momentum. That means recognizing early signs of radicalization — not only in physical spaces but also online, where many people now spend their time.

The Cost of Complacency

Twenty-five years after that morning in September, America is more secure from a certain kind of terrorist threat than it was in 2001. But the same system that protected us from those attacks may no longer be sufficient to stop others.

The challenge isn't just about funding or staffing — it's about mindset and adaptability. We must avoid falling into the trap of thinking we're safe simply because the last major attack was so long ago. If we allow that complacency to set in, history could repeat itself — not through an organized network, but through a single, radicalized individual who feels empowered to act.

In the end, this is what defines our current moment: The old enemy has changed, and we must change with it — or risk being caught off guard once again.