.jpg/:/rs=w:400,h:400,cg:true,m/cr=w:400,h:400/qt=q:95)
⚠ Urgent Operational Advisory
Given the significant escalation in strike activity across South Lebanon and the Bekaa, confirmed Israeli Prime Minister Netanyahu’s May 25–26 orders to intensify operations and “crush Hezbollah,” emergency consultations within Israeli security structures, and localized population movements from Beirut’s southern suburbs, all agencies must immediately assume an elevated operational posture. The reporting pattern is consistent and escalating; this advisory reflects confirmed field intelligence and public statements by senior officials.
Exercise heightened caution across South Lebanon, Bekaa, and Beirut southern suburb corridors. Conduct real-time route and area assessments prior to all planned movement. Ensure movement tracking procedures are activated with check-ins at no greater than two-hour intervals for elevated-risk areas, and ensure escalation procedures for delayed movements are documented and tested.
Avoid congregation points, significant traffic congestion areas, and locations witnessing population movements or spontaneous gatherings. Maintain readiness for short-notice movement restrictions. Contact SARI Global for live incident monitoring, movement planning, and operational risk assessments.
Key Weekly Highlights
- Kinetic escalation: Israeli military operations intensified significantly, with over 150 recorded strikes, heavy ground engagements at Haddatha involving armored columns, and mass-casualty airstrikes. The May 25 surge alone registered 123 discrete incidents — the single highest daily count of the reporting period.
- Netanyahu escalation order (May 25–26): Israeli PM Benjamin Netanyahu publicly ordered the IDF to “press the pedal even harder,” vowing to “intensify strikes, increase firepower and crush” Hezbollah. Statements triggered anticipatory displacement from Beirut’s southern suburbs and IDF Bekaa Valley strikes.
- Amnesty law civil unrest (May 19–22): Parliamentary committee advancement of a general amnesty bill triggered immediate multi-governorate protest activity. Burning-tire roadblocks severed the Khalde coastal highway and the Awali bridge in Saida. Speaker Berri ultimately postponed the parliamentary vote.
- US diplomatic sanctions (May 21): The US Department of State issued targeted sanctions against senior Lebanese security officials in Army Intelligence, General Security, and the Amal Movement — introducing new institutional friction at a critical juncture.
- Urban financial crime surge: ISF seized 274,900 USD in counterfeit currency in Hamra; two EDL employees arrested for multimillion-dollar copper cable theft; 12,000 liters of humanitarian diesel recovered after diversion in northern Lebanon.
ESCALATION SPECIAL FOCUS — Netanyahu’s “Crush Hezbollah” Order
On May 25, Israeli Prime Minister Benjamin Netanyahu publicly announced he had instructed the IDF to dramatically intensify operations in Lebanon, framing the directive as a response to an accelerating Hezbollah drone campaign — including fiber-optic guided systems that Israeli officials privately acknowledged present serious defensive challenges. A senior Israeli security official told Channel 12 the IDF was “at the moment defenseless in the face of this deadly reality.”
Netanyahu’s statement marked a decisive shift from a containment-and-deterrence posture to an explicitly declared objective of military resolution. His remarks came amid US-Iran negotiations in which Tehran has demanded a halt to Israeli strikes in Lebanon as a precondition — placing Washington in a structurally difficult position between its Iranian diplomatic track and Israeli military escalation demands. Despite this diplomatic pressure, a US official signaled Washington would approve a broader Lebanese operation.
“We are at war with Hezbollah. Just in recent weeks, our brave fighters have eliminated more than 600 terrorists. But we are not taking our foot off the gas. On the contrary, I have instructed them to press the pedal even harder. We will intensify our strikes, increase our firepower and crush them.”— Israeli PM Benjamin Netanyahu, May 25–26, 2026
The statement immediately triggered panic-driven displacement from Beirut’s southern suburbs on May 26 and prompted mass emergency evacuations in Tyre and the surrounding refugee camps on May 25 — one of the largest single-day displacement events of the reporting period.
DOMESTIC FLASHPOINT — General Amnesty Law & Civil Unrest
The draft general amnesty law — negotiated as part of a broader sectarian political bargain — would potentially release over 3,400 inmates including those convicted of terrorism-related offenses, with amnesty covering crimes committed before March 1, 2026. Joint parliamentary committees approved the draft on May 19, triggering immediate and sustained civil unrest nationwide.
Key exclusions under debate include intentional murder, crimes referred to the Judicial Council, felony narcotics offenses, espionage, and anti-corruption violations. Islamist detainee families — particularly supporters of imprisoned cleric Ahmad al-Assir — protested that these exclusions rendered the law “unjust and inequitable.”
Protests erupted simultaneously in Tripoli’s Nour Square, Khalde, the Awali bridge in Saida, Arsal, Jiyeh, and Majdal Aanjar. The Lebanese Army deployed specialized units to clear burning-tire roadblocks. Parliament Speaker Nabih Berri ultimately postponed the plenary session indefinitely “under the banner of consensus” — but the underlying divisions remain unresolved.
- May 19: Burning-tire roadblock severs Khalde highway; Awali bridge protests in Saida; Army deployment
- May 20: Mass demonstration in Tripoli Nour Square; Masnaa road protest in Majdal Aanjar (Bekaa)
- May 21: US imposes sanctions on Lebanese security officials — additional institutional pressure
- May 22: Protest outside Beirut Parliament by families of deceased Lebanese Army personnel
- May 22: Speaker Berri postpones parliamentary vote indefinitely
Forward Outlook: The amnesty file is politically alive and sectarianly charged. Any resumption of parliamentary debate carries a high probability of triggering renewed road disruptions on the coastal Beirut–Saida corridor. Operational contingency routing must remain active.
Weekly Overview
Between May 19 and May 25, the security environment in Lebanon deteriorated at an accelerating rate driven by the exponential expansion of cross-border kinetic activity and the IDF’s deepening ground presence in South Lebanon. The reporting period saw widespread airstrikes, drone attacks, and saturating artillery barrages across municipal centers and residential areas throughout South Lebanon and Nabatieh, peaking catastrophically on May 25 with 123 logged incidents in a single day — a figure reflecting the full weight of Netanyahu’s escalation order beginning to translate into operational reality on the ground.
Mass casualty events defined the week: an airstrike in Sir El Gharbiyeh on May 23 killed 15 individuals across four families, while a strike in Deir Qanoun on May 20 killed 14 people including four children. The Hannawiyeh Islamic Health Authority center was struck on May 22, killing four — a pattern of medical infrastructure targeting that has significantly degraded emergency response capacity in the south. Ground clashes at Haddatha on May 20 saw Hezbollah claim the destruction of four Israeli Merkava tanks using a combination of anti-armor missiles and coordinated Ababil drone swarms — a tactically sophisticated defensive posture indicating Hezbollah retains significant asymmetric capability despite sustained attrition.
Sweeping Israeli evacuation orders for Tyre and surrounding refugee camps on May 25, combined with sonic boom operations over Saida, Tyre, and Beirut, reflect a deliberate intimidation and depopulation campaign. The destruction of the Bint Jbeil Public High School illustrates the systematic elimination of civilian infrastructure as a denial strategy.
In the political and civil sphere, domestic stability was heavily tested by the amnesty law controversy. US sanctions against senior security officials on May 21 added new institutional complexity. Urban centers registered a concerning surge in sophisticated organized criminality: counterfeit currency distribution, state infrastructure theft, armed impersonation of security forces, and predatory targeting of humanitarian fuel supplies.
Operational Maps
Geographic Zoom-In
South Lebanon & Nabatieh — Primary Conflict Theater
The southern border region constitutes the unambiguous primary theater of active armed conflict, sustaining catastrophic structural damage and severe civilian and combatant casualties throughout the reporting period. The Israeli Armed Forces conducted over 150 discrete kinetic incidents including airstrikes, drone strikes, and intensive artillery barrages targeting dozens of municipalities simultaneously.
Mass-casualty events defined the week: 15 individuals killed in Sir El Gharbiyeh (May 23) across four families, and 14 killed in Deir Qanoun (May 20) including four children — a combined 29 fatalities in two incidents alone. The Islamic Health Authority center in Hannawiyeh was struck on May 22, killing four. Ground engagements at Haddatha on May 20 saw Israeli armored columns advance and be met with Hezbollah anti-armor missiles and coordinated Ababil drone swarms, with four Merkava tanks claimed destroyed. Israeli evacuation orders for Tyre city on May 25 — covering the city center, Rimali, the Industrial City, and refugee camps — triggered a major uncoordinated displacement surge northward.
Beirut & Mount Lebanon — Surveillance, Crime & Urban Instability
The capital and its mountainous periphery witnessed 15 notable security and criminal incidents. Israeli UAV activity was near-continuous over Beirut, the Southern Suburb, Bchamoun, and Aramoun throughout the period. Lebanese Army engineers dismantled an unexploded aerial bomb in Sfeir on May 24 — an indicator of the collateral hazard extending into Greater Beirut’s periphery.
On May 21, the Lebanese Financial Prosecutor arrested two Electricité du Liban employees implicated in a multimillion-dollar copper cable theft. On May 22–23, ISF seized 274,900 USD in high-quality counterfeit currency from a Hamra distribution ring. A severe armed altercation involving vehicle pursuits in Noueiri (May 21) and a major collision on the Salim Salam highway (May 23) illustrate the compounding risks to movement security in the capital.
Baalbek-Hermel — Surveillance Expansion & Weapons Seizure
The northeastern governorates experienced an expanding Israeli drone surveillance footprint and significant organized crime enforcement. On May 20, the Lebanese Army conducted a targeted raid in Brital, confiscating military-grade weapons and ammunition. Israeli drone activity was recorded repeatedly over Baalbek and surrounding communities. While kinetic strikes have not yet struck within Baalbek-Hermel proper during this period, the drone surveillance density is consistent with pre-strike intelligence-gathering patterns.
Bekaa — Infrastructure Risks, Humanitarian Theft & Corridor Surveillance
On May 25, a structural fire devastated portions of the Al-Andalus displacement camp in Bar Elias. Israeli UAV activity was recorded persistently over the Dahr el Baidar pass and the Zahle area, significantly elevating the risk profile for transport corridors connecting Beirut to the Syrian border. The Dahr el Baidar pass is currently under active drone surveillance — any convoy transiting this route must treat it as an elevated-risk environment. Six airstrikes targeted Machghara on May 25, confirming geographic conflict expansion into Bekaa communities.
North Lebanon & Akkar — Security Force Impersonation & Financial Crime
On May 25, a criminal syndicate impersonating official Lebanese security forces conducted an armed robbery at a Tripoli residence — exploiting the normalization of intelligence operations in residential areas. State Security seized 12,000 liters of stolen diesel fuel on May 20, originally earmarked for displacement centers. A counterfeit USD distributor was arrested in Machha (Akkar). The military court sentenced four women in absentia to 15 years for operating a cryptocurrency-scam espionage network in Tripoli.
Keserwan-Jbeil — Property Crime Spike
On May 21, a masked individual committed five consecutive commercial burglaries targeting retail cash registers in Zouk Mosbeh — rapid-succession crimes indicating prior surveillance of targets and collapse of local policing deterrence. A fatal pedestrian incident on the Bouar highway on May 19 prompted police appeals for identification of an unidentified female victim.
Trend Analysis
Trend 1: Cross-Border Conflict — From Attrition to Systemic Urban Targeting
The conflict dynamic has decisively transitioned from localized attrition to systemic, high-casualty urban targeting and direct armored ground engagements. This is not a gradual drift — it is a threshold crossing with a specific identifiable inflection point. May 25 produced 123 discrete logged incidents in a single day — nearly matching the combined output of the four preceding days. The intelligence pattern visible in the data preceded Netanyahu’s public escalation statement by at least 48 hours: the operational orders had already been issued before they were announced.
Three categories of target selection are now confirmed and consistent. First, medical infrastructure: the airstrike on the Islamic Health Authority center in Hannawiyeh (May 22, 4 killed) follows a pattern of degrading emergency response capacity precisely when civilian casualties are spiking. Second, educational infrastructure: the destruction of the Bint Jbeil Public High School is the elimination of a community anchor as part of a depopulation strategy. Third, civilian mobility infrastructure: the drone strike on a municipal vehicle on the Nabatieh-Zifta highway (May 24, 1 killed) and the strike on a journalist in Deir Qanoun (May 24, 1 killed) suggest systematic targeting of people moving through conflict zones.
Hezbollah’s tactical response demonstrates retained asymmetric capability. Four Merkava tanks claimed destroyed at Haddatha using anti-armor missiles and Ababil drone swarms represents a sophisticated combined-arms engagement. The deployment of fiber-optic guided drone systems — which resist electronic jamming — was publicly acknowledged by Israeli officials as a capability they have no effective counter to. Hezbollah’s SAM interception of an Israeli Hermes-450 UAV over Roumine on May 24 further confirms retained air-defense capability.
Operational Implications
Movement: Any organizational footprint south of the Litani River is presently unsustainable. Hard movement freezes in all areas under active IAF evacuation warnings. Vehicle proximity to military traffic, civilian maintenance activity, or previous strike locations creates immediate secondary-strike risk.
Personnel: Transition immediately to remote national-staff management for all life-saving functions south of the Litani. International staff remaining in the zone require satellite communication, hardened safe rooms, and MEDEVAC pre-authorization.
Forward planning: Netanyahu’s explicit statement of intent removes any near-term de-escalation assumption. Plan for current intensity as a minimum baseline extending at least 30 days forward.
Trend 2: Amnesty Law as Civil Unrest Trigger — Structural, Not Episodic
The civil unrest generated by amnesty law deliberations is structurally different from a spontaneous protest event. This is a politically engineered crisis with a predictable trigger mechanism: every time the amnesty file advances through parliament, roadblocks appear on Lebanon’s primary logistical spine within hours. Speaker Berri’s indefinite postponement is a pressure-valve release, not a resolution. The underlying sectarian arithmetic — Sunni Islamist detainee families, Christian groups pushing for SLA returnees, the Amal Movement managing constituency demands — has not changed.
The geographic footprint of the disruption is what makes it operationally significant: burning-tire roadblocks at Khalde (where the Beirut-Damascus highway meets the coastal road), the Awali bridge at the entrance to Saida, Nour Square in Tripoli controlling northbound traffic, and the Masnaa road at the Syrian border. These are Lebanon’s four critical choke points. Any organization running supply chains between Beirut and the south, Bekaa, or Syria is exposed.
Counter-protests rejecting the amnesty terms emerged in Tripoli’s Nour Square simultaneously with pro-release demonstrations. The Lebanese Army’s mandate specifically included preventing “sectarian friction” — language signaling the risk of protest-on-protest violence at contested locations. Informed parliamentary sources have stated the current formula “is not final” — the file will be re-tabled.
Operational Implications
Routing: The Beirut–Saida coastal highway must be treated as a conditionally disrupted artery. The upper Chouf mountain route (via Beit ed-Dine) provides an inland alternative but adds significant transit time.
Airport access: The Khalde junction sits on the primary airport access road. Any roadblock directly threatens flight connectivity for evacuating staff.
Monitoring: Assign a dedicated staff member to track Lebanese parliamentary proceedings via the NNA feed. A session announcement should trigger immediate route pre-assessment.
Trend 3: Institutional Corruption & Large-Scale Financial Crime
The concurrence of three distinct major financial crime incidents within a single reporting week is statistically improbable as coincidence. It reflects a structural condition: Lebanon’s economic crisis has created a predatory environment where the incentive to exploit state, humanitarian, and commercial assets vastly outweighs the deterrence value of law enforcement.
The EDL copper cable theft is particularly significant: the perpetrators were EDL employees — insiders with operational knowledge and access credentials conducting a multimillion-dollar extraction without triggering immediate detection. Generator dependency should be assumed, not treated as a contingency. The 274,900 USD Hamra counterfeit seizure represents only the visible fraction of a multi-node network operating simultaneously across the country. The 12,000-litre diesel theft from displacement centres is the most direct attack on humanitarian operations — fuel is Lebanon’s most valuable operational currency in a country with 22+ hour daily power cuts.
Operational Implications
Fuel: GPS-tracked tankers, dual-key release authorisation at delivery, and fuel metre reconciliation at receipt. Any deviation between ordered and delivered quantities triggers investigation.
Cash: UV and magnetic counterfeit detection hardware at every field finance location. Electronic transfer mandatory for payments above USD 500.
Procurement: Audit all local suppliers, particularly utility-adjacent vendors. Spot-check deliverables against specifications.
Trend 4: Urban Criminality & Security Force Impersonation
The armed home invasion in Tripoli on May 25 — in which a criminal syndicate impersonated official security personnel conducting an authorised raid — is the most operationally significant criminal incident of the reporting period. It exploits a systemic vulnerability: the normalised presence of Army Intelligence, ISF, and State Security conducting unannounced residential visits has created a social engineering attack vector. There is no widely implemented verification protocol for these visits, because challenging state security personnel carries its own risks.
The Tripoli attackers weaponised this dynamic precisely. By presenting as a security force, they neutralised occupants’ instinct to resist — compliance with a perceived security raid is the trained response. This tactic requires minimal investment: credible uniforms, civilian 4WDs, and confident procedural behaviour. It is replicable at low cost and will recur.
The Zouk Mosbeh serial burglaries (five shops, one masked individual, May 21) and the Mount Lebanon serial armed robber arrest reflect a related dynamic: the collapse of deterrence at neighbourhood policing level. Five sequential burglaries in the same area indicates prior target surveillance and confidence that police response will be absent.
Operational Implications
Verification protocol — mandatory: (1) Request ID without opening the door. (2) Call a pre-programmed LAF/ISF liaison number to authenticate. (3) Notify security focal point in parallel. (4) No entry until verification confirmed. Brief all staff including household staff.
Residence hardening: External cameras, reinforced doors, and an internal safe room with independent satellite/radio communication are minimum standards.
Incident reporting: Mandate immediate reporting to SARI Global of any unannounced security-personnel visit to organisational compounds or staff residences.
Humanitarian Outlook
The convergence of expanding kinetic warfare in the south, institutional breakdown in urban centers, and deepening economic predation is creating a compounding humanitarian crisis with no clear stabilization horizon. Mass evacuation warnings for Tyre district are triggering uncoordinated displacement waves toward already-saturated shelters in Mount Lebanon and the Bekaa — as evidenced by the Al-Andalus camp fire in Bar Elias.
The theft of humanitarian fuel in northern Lebanon directly degrades NGO winterization, sanitation, and emergency response capabilities. The contamination of agricultural land and residential areas with unexploded ordnance — including a bomb safely defused in Sfeir (Mount Lebanon) on May 24 — extends the post-conflict recovery challenge well beyond the active conflict zone. Healthcare infrastructure has been systematically targeted. The combination of these factors points to a protracted post-conflict recovery phase requiring immense sustained international resource allocation.
Risk Assessment Matrix
| Category | Risk Description | Likelihood | Impact | Mitigation |
|---|---|---|---|---|
| Armed Conflict | Aerial strikes or drone targeting of vehicles proximate to NGO/commercial convoys in South Lebanon. | High | Critical | Suspend all movement south of the Litani River. Strict UNIFIL deconfliction. Hard movement freeze in evacuation areas. |
| Civil Unrest | Burning-tire roadblocks on Khalde–Awali coastal highway on any resumption of amnesty law deliberations. | High | Moderate | Monitor parliamentary proceedings in real time. Pre-plan alternate Chouf routing. Brief drivers on de-escalation procedures. |
| Impersonation | Armed home invasions by syndicates impersonating Lebanese security forces at expatriate residences. | Medium | Severe | Enforce visitor verification protocols. Establish LAF/ISF authentication hotlines. Upgrade access controls and install safe rooms. |
| Financial Fraud | Receipt of high-quality counterfeit USD during procurement. Active distribution rings confirmed in Hamra and Akkar. | High | Moderate | Deploy currency verification machines at all field finance offices. Mandate electronic transfers above USD 500. |
| UXO / Blast | Unexploded ordnance and blast overpressure affecting Beirut’s southern suburbs and adjacent communities. | Medium | Severe | Relocate staff from high-risk southern suburb areas. Structural blast assessments at primary offices. UXO reporting to LAF EOD. |
| Supply Chain | Predatory theft of humanitarian fuel, medical supplies, and aid materials. 12,000 liters diesel seized in one incident. | High | Severe | Chain-of-custody fuel monitoring. Maintain minimum 14-day reserves at all regional field hubs. |
| Drone Surveillance | Persistent low-altitude Israeli UAV surveillance over Beirut, Mount Lebanon, Bekaa, and Baalbek-Hermel. | High | Moderate | Treat surveilled areas as potential strike precursors. Brief field staff on UAV-activity recognition. Avoid predictable movement patterns. |
Strategic Recommendations
.jpg/:/rs=w:200,h:200,cg:true,m/cr=w:200,h:200/qt=q:95)