In the short term, Iran is probably the most likely place where a direct attack on US citizens will originate, particularly if the US and/or Israel finally end up attacking the nuke program. The total threat from Russia is more varied and ultimately more existential, but also less a matter of immediate security risks than of keeping up a steady build out of social/civic/IT/intelligence resistance to Russian operations.