Weekly Security Brief

Iran

September 28, 2026GeoBit Threat Rank #6 · Score 96civil unrest
⬇ Iran dataset (CSV) — events, per-region risk, cyber & sources

Situation Summary

Iran faces a composite of security pressures spanning militant activity in its southeastern frontier, labor and economic protests in urban centers, and a reported heightened security posture in the capital. Sistan and Baluchistan Province remains the primary locus of organized insurgent operations, with at least three armed clashes reported in the past week resulting in casualties on both sides. Concurrent civil unrest—driven by wage arrears, workplace safety, and healthcare staffing issues—coupled with new US sanctions restricting air access, suggests downward economic momentum that could sustain or amplify domestic grievance. The security apparatus has responded with expanded surveillance and personnel deployment in Tehran, signaling official concern over protest coordination or escalation.

Key Developments

Highest-Risk Areas

Sistan and Baluchistan Province dominates the risk profile, with sustained militant activity by Baluch separatist and Sunni extremist groups (Mobarizoun Popular Front, Fitna al-Hindustan) engaged in recurring armed clashes with IRGC and law-enforcement units along the Pakistan border. Secondary risk concentrations appear in Khuzestan (labor unrest, critical infrastructure presence) and the Strait of Hormuz corridor (maritime incident frequency and commercial chokepoint status). Urban centers including Tehran, Kermanshah, and Ahvaz face protest and civil unrest risk tied to economic deterioration and service-sector grievances.

How GeoBit Would Assist

Teams with personnel or assets in Iran would benefit from AOI Monitoring & Early Warning to track protest activity and security force deployments in Tehran and key cities; Conflict & Military capability to assess IRGC force posture and casualty trends in Sistan and Baluchistan; and Maritime & Aviation tracking to monitor tanker movements and commercial-air disruptions around the Strait of Hormuz and affected airports. Network & Actor Analysis of militant and protest-coordination messaging across Telegram and other platforms would provide earlier tactical warning of planned operations or escalation.

7-Day Outlook

Militant activity in Sistan and Baluchistan is likely to persist at current intensity given the group density and porous border environment. Domestic labor and economic protests will probably remain localized and episodic unless wage/benefits concessions are announced or economic conditions sharply worsen. The heightened security posture in Tehran suggests official expectation of near-term protest activity, with elevated risk of confrontation or incident in the next 7–14 days.

Previous Weekly Briefs

A new Iran brief is written every Monday, covering the week — each with its own risk map and downloadable CSV. Use the calendar to go further back.

📅 Browse past briefs by calendar →

Highlighted days have a brief. Tap a day for that day's map & analysis, or “csv” for that day's dataset ($5).

June 2026
SMTWTFS
123456789101112131415161718192021222324252627282930
July 2026
SMTWTFS
12345678910111213141516171819202122232425262728293031
August 2026
SMTWTFS
12345678910111213141516171819202122232425262728293031
September 2026
SMTWTFS
123456789101112131415161718192021222324252627282930
⬇ Download PDF
See Iran live.
GeoBit maps Iran — every region, event, and risk layer — on demand.
Request a live demo →
Share this intelligence
X LinkedIn Reddit Facebook WhatsApp Telegram Email Copy link

Atlas — our AI intelligence desk — emails them this snapshot personally. Nothing else, no list.

Automated by GeoBit AI from publicly reported events and open-source research. Context only; not a risk advisory. Recognized by Deloitte · NVIDIA Inception · Geospatial World Forum.

Email me the brief

Enter your email — we'll send it over.

Need this done for your sites?

Start with one product on Iran.

This brief is the free weekly read. If Iran matters to your people or sites, GeoBit analysts will do the specific piece of work you need, on a date, or watch your sites there around the clock. Pick one, tell us where and when, and a person comes back with a scope, a date and a quote within one working day.

Risk assessmentIran · quote within one working dayThreat assessmentIran · quote within one working daySecurity assessmentIran · quote within one working dayOne month of the watchIran · quote within one working day
Or hire the person: a named analyst on your channels from the next business day →