Sharon Region Attack: IDF Assesses Two Assailants; One Neutralized, Second Wounded and Still at Large

What Happened — Updated Picture

The attack unfolded in the morning hours of June 7, 2026, as two assailants driving a silver Toyota with Israeli license plates opened fire at a series of locations across the Sharon region — a densely populated coastal plain north of Tel Aviv. According to material reviewed by The Zioneer Intelligence Desk, the shooting spree began at a gas station in Kochav Yair and continued through Tzur Yitzhak, Tzur Natan, and ultimately Sal'it. The use of Israeli license plates is a significant operational detail: it suggests the attackers sought to reduce the likelihood of being stopped at checkpoints or flagged by other drivers before reaching their targets — a tactic that security forces will now factor into their investigation.

The IDF's current assessment, as reported by material reviewed by The Zioneer Intelligence Desk, is that both assailants traveled in a single vehicle. One was neutralized by security forces; the second is believed to have been wounded by gunfire during the response but succeeded in fleeing. The vehicle itself has been seized and is in the hands of investigators. As of publication, the second assailant remains at large.

The Casualties

Magen David Adom (MDA) — Israel's national emergency medical service and the country's Red Cross equivalent — provided the most authoritative casualty accounting available. MDA Director General Eli Bin, speaking on Galei Tzahal (IDF Radio), reported a total of six casualties across all attack sites: one fatality, one person in serious condition, and four with light-to-moderate injuries. Wounded were evacuated to Beilinson and Meir hospitals; Beilinson confirmed two patients in moderate condition in its trauma room.

An earlier report cited five wounded and two in serious condition. The discrepancy between early and later counts is consistent with the fluid nature of a multi-site incident, where casualty tallies are revised as medical teams consolidate information. The MDA Director General's figure of six total — one dead, one serious, four moderate-to-light — is the most authoritative number available at this time, though the picture may still shift.

The Manhunt and Civil Response

With the second assailant unaccounted for, security forces mounted an extensive search operation across the Sharon region. An infiltration alert was activated in the community of Tzur Yitzhak during the incident, prompting residents to shelter in place. The Shin Bet (Israel's internal security service) has joined the investigation, a step that signals the attack has been formally classified as a terrorism matter and that intelligence work to identify the network behind it is now underway.

Hila Ben-Harosh Hachmon, head of the Kochav Yair local council, issued a direct message to residents: "I am asking you not to leave your homes." The instruction reflects standard civil-defense protocol when a suspect remains at large in or near a populated area — and underscores that, as of the time of her statement, the threat had not been fully contained.

A Carlo-type improvised submachine gun — a homemade weapon that has appeared in previous attacks in Judea and Samaria and Israel's periphery — was recovered at one of the scenes, according to material reviewed by The Zioneer Intelligence Desk. The Yamam, the Israel Police's elite counter-terrorism unit, was also deployed to the area.

Analysis: What Is Confirmed, What Is Not

Several elements of this attack are confirmed or assessed with reasonable confidence: two assailants, one vehicle with Israeli plates, four shooting locations, one fatality, five additional wounded, one attacker neutralized, the vehicle seized. The IDF's assessment of the second attacker's wounding is described as an assessment — not a confirmed kill or capture — and should be read as such. The identity, affiliation, and organizational backing of the attackers remain unknown at this stage; no group has claimed responsibility in material reviewed by The Zioneer Intelligence Desk.

The use of Israeli license plates, the multi-site rolling pattern, and the deployment of both the Shin Bet and Yamam from early in the incident all point to a premeditated, coordinated attack rather than a spontaneous act. Whether this was a cell operating independently or directed by a larger organization is a question the investigation will need to answer.

What It Means — What to Watch

This attack lands at a moment when Israel is managing simultaneous security pressures: active military operations in Gaza and Lebanon, and now a lethal domestic terror incident in the Sharon region — a part of Israel proper that is not typically associated with this type of rolling attack. The geographic reach of the assault, from Kochav Yair through to Sal'it, and the operational sophistication of using Israeli plates, will raise questions about how the attackers moved, who supported them, and whether additional cells are active.

The immediate priority for security forces is the manhunt for the second assailant. Until that individual is located — dead, captured, or confirmed to have crossed back — communities in the area will remain on heightened alert. The Shin Bet's involvement means the intelligence dimension of the investigation is already running in parallel with the operational search.

The Zioneer Intelligence Desk will update this report as confirmed information becomes available. Readers should treat casualty figures, the status of the second assailant, and any claimed affiliation as provisional until independently verified.