TLP:CLEAR · Disclosure is not limited.

Sahel jihadist networks: cross-border support and widening pressure

Time window: Last 7 days · Audience: General analyst · Type: Situation report · DTG: 2026-09-13 00:04Z · Overall confidence: HIGH

BLUF

The strongest current evidence points to expanding operational links between ISWAP and ISGS, including ISWAP support in Liptako-Gourma, a planned 100-fighter reinforcement for Ménaka, and reported armed-drone use by ISGS in Niamey. ISWAP participation in the Niamey attack remains unresolved, while JNIM's pressure potential and Chad's existing security risks warrant separate monitoring rather than being treated as one coordinated campaign.

Executive summary

Reporting from 8 to 10 September indicates that ISWAP is supporting ISGS across the Lake Chad and Liptako-Gourma areas and has planned to send 100 fighters to Ménaka. ACLED recorded 16 ISWAP drone-related actions since 2024, while ISGS reportedly used armed drones for the first time in its January attack on Diori Hamani International Airport and Air Base 101 in Niamey. Evidence of ISWAP participation in that attack is suggestive but contested. JNIM is assessed to have the capacity to convert sustained operations into economic and political pressure across the central Sahel, but the supplied claims do not establish a declared new phase or a specific Djibo-related order. Chad remains exposed to terrorist attacks, kidnappings and restrictions on assembly and Internet access, particularly in the Lac region, N'Djamena and border areas.

Key judgments

1. ISWAP is likely to be building a cross-border support relationship with ISGS, but direct ISWAP participation in the January Niamey attack remains unresolved. Reporting states that ISWAP has committed personnel to support ISGS in Liptako-Gourma and planned to send 100 fighters to Ménaka, while ACLED recorded 16 ISWAP drone-related actions since 2024. The same reporting attributes the attack on Diori Hamani International Airport and Air Base 101 to ISGS and identifies it as ISGS's first reported use of armed drones. Kanouri-language footage suggests, but does not establish, ISWAP participation. Confidence is medium because the core reporting is concentrated in one trade publication and the attacker attribution is contested. (Confidence: medium · ASSESSED)

• I&W: Independent imagery, communications or official findings identify ISWAP personnel in the January operation against Diori Hamani International Airport or Air Base 101. (0-30 days)
• I&W: The planned 100-fighter reinforcement does not materialise in Ménaka and no new evidence of ISWAP support to ISGS appears. (1-3 months)

2. ISGS is likely to consolidate activity in northwest Nigeria, especially Sokoto and Kebbi, as fighters reportedly cross the southern Niger border. Nigerian authorities also assess that insecurity in the Alliance of Sahel States countries increases insecurity in Nigeria. Confidence is medium because the cross-border activity is reported by ISS through a trade publication and lacks event-level corroboration in the supplied claims. (Confidence: medium · ASSESSED)

• I&W: Verified attacks, repeated crossings or ISGS recruitment material appear in Sokoto or Kebbi. (1-3 months)
• I&W: Nigerian authorities report no repeat ISGS activity in Sokoto or Kebbi and local reporting records no new cross-border incidents. (1-3 months)

3. JNIM is likely to use its reported surge capacity to impose greater economic and political pressure across the central Sahel during the next 30-90 days. The supplied evidence establishes a general capacity assessment, not a confirmed declaration of a new phase or an event-level account of the reported Djibo-related activity. Confidence is low because this forward judgment rests on a single think-tank assessment without corroborating operational reporting in the supplied claims. (Confidence: low · ASSESSED)

• I&W: A verified JNIM communiqué names a town in the central Sahel and sets a deadline for civilian movement or compliance. (0-14 days)
• I&W: No independently corroborated JNIM economic coercion, political messaging or operational surge appears in the central Sahel. (1-3 months)

4. Chad is very likely to remain a high-risk operating environment over the next 1-3 months, particularly in the Lac region, on Lake Chad islands, in N'Djamena, in Tandjilé and near borders with Cameroon, Sudan and the Central African Republic. The basis is repeated reporting of deadly attacks, terrorist attacks in N'Djamena, kidnappings of foreigners, restrictions on assembly and potential Internet restrictions, alongside a closed Libya-Chad land border and stringent travel advisories. Confidence is medium because the travel-advisory claims differ in scope and the supplied material does not provide a dated incident count. (Confidence: medium · ASSESSED)

• I&W: Chadian authorities maintain nationwide assembly restrictions or impose an Internet restriction, while Canada continues to advise against non-essential travel to Chad and all travel to the Lac region and designated border areas. (0-30 days)
• I&W: A new terrorist attack, deadly attack or kidnapping of a foreign national is reported in N'Djamena, the Lac region, Tandjilé or a named border area. (0-3 months)

5. The regional counter-terrorism response is likely to remain operationally fragmented, allowing ISWAP and ISGS to exploit gaps between Niger, Nigeria and the Alliance of Sahel States. Niger's withdrawal from the Multinational Joint Task Force, strained Niger-Nigeria security relations and the reported underfunding and ineffectiveness of the AES's 6,000-strong joint force support this assessment. Confidence is medium because these judgements are drawn mainly from trade reporting and include assessments of force effectiveness rather than independently verified performance data. (Confidence: medium · ASSESSED)

• I&W: Niger does not rejoin the Multinational Joint Task Force and the AES force records no publicly verified coordinated operation in the Liptako-Gourma or Ménaka areas. (1-3 months)
• I&W: Niger and Nigeria announce a joint security mechanism or the AES force conducts a documented operation against ISGS or ISWAP-linked activity. (1-3 months)

Outlook & scenarios

Sustained ISWAP-ISGS support without rapid territorial expansion (45%)

This is the most likely path. ISWAP continues to provide personnel or expertise to ISGS, while evidence remains insufficient to prove a standing joint command. Drone use remains episodic and the planned reinforcement of Ménaka is not confirmed.

Westward IS affiliate penetration (25%)

ISGS activity becomes more visible in Sokoto and Kebbi, while the planned reinforcement of Ménaka materialises. Nigerian authorities face a wider cross-border security burden as the AES security gap persists.

JNIM-led coercive pressure (20%)

JNIM converts its reported central Sahel surge capacity into sustained economic or political pressure, while IS affiliate activity remains concentrated around Liptako-Gourma, Ménaka and northwest Nigeria. Chad remains a separate high-risk theatre rather than part of one unified campaign.

Multi-front jihadist shock (10%)

This is an unlikely but high-impact wildcard. A further armed-drone attack against a military target coincides with verified ISGS activity in Sokoto or Kebbi and a new JNIM coercive campaign in the central Sahel, overwhelming fragmented regional responses and forcing additional restrictions in Chad.

Recommendations

1. Prioritise collection on the planned movement of 100 ISWAP fighters to Ménaka. Distinguish confirmed personnel movements from reporting of intent, and maintain a separate attribution line for ISGS and ISWAP activity.
2. Establish a 0-14 day watchlist covering Liptako-Gourma, Ménaka, Niamey, Diori Hamani International Airport, Air Base 101, Sokoto and Kebbi. Cross-check imagery, local reporting and group media before assessing a new drone or cross-border operation.
3. Treat the Kanouri-language evidence as an attribution lead rather than proof of ISWAP participation in the Niamey attack. Seek independent evidence before linking future ISGS attacks to ISWAP.
4. Monitor JNIM statements and activity for named towns, civilian movement demands, economic coercion or political messaging. Do not elevate a general surge-capacity assessment to a confirmed new phase without event-level corroboration.
5. Update Chad risk tracking separately from the Sahel affiliate assessment. Record changes to assembly restrictions, Internet access, the Libya-Chad border closure and travel advisories, with specific attention to N'Djamena, the Lac region, Tandjilé and foreign nationals.
6. Use low-confidence thermal detections as background context only. Do not treat satellite fire detections as evidence of a jihadist attack or use them to assign responsibility.

Confidence & uncertainty

Overall confidence is high for the existence of the reported security developments and the current risk posture. The evidence base contains five usable sources, including official government reporting from Canada and NASA, trade reporting incorporating ACLED research and a separate think-tank assessment. Corroboration is strongest for Chad's restrictions, travel warnings and established attack risk. Confidence is lower for ISWAP's direct role in the January Niamey attack and for the forward assessment of JNIM's political and economic pressure. The supplied claims do not independently substantiate the reported Djibo appeal, a JNIM declaration of a new phase or a Chad base attack with 24 fatalities, so those elements are not treated as established.

Cited sources

[1] ADF Magazine (Africa Defense Forum) · Les affiliés de l’État islamique établissent des connexions au Sahel (B) · Tue Sep 08 2026 18:21:55 GMT+0000 (Coordinated Universal Time) · sha256:6f1ba818e79a [2] Daniele Garofalo Monitoring · Global Jihadist, Insurgent & Hybrid Warfare Threat Assessment (C) · Wed Sep 09 2026 14:41:31 GMT+0000 (Coordinated Universal Time) · sha256:99c65cfc91cc [3] Government of Canada (Global Affairs Canada) · Conseils et avertissements pour le Tchad (A) · sha256:ec8a833722ff

Source content hashes were computed at collection time; the cited text is preserved unmodified for the life of this product.

TLP:CLEAR