A few militants defending a Syrian river bank are all that is left of IS’s ‘caliphate’. 40,000 foreigners from 110 countries joined it; many have gone home, creating security challenges. Thousands are in Kurdish detention camps awaiting relocations. Distinguishing between regretful and repentant hangers-on and truly dangerous fighters is a legal and political nightmare, creating relationship cracks between Europe and US. Meanwhile IS’s black flag flies over an enclave on the Philippine island of Basilan, where a cathedral was bombed. IS-linked groups are still active in Nigeria, Sudan, Pakistan, India, Indonesia, Bangladesh, and stretches of northern Africa and the Sahel. While they may not have access to the oil revenues that enabled IS to claim to be an actual state, they remain a security threat. IS is also alive and well on the web, with gruesome and well-produced propaganda.