All of the successful attacks around the world in the last 15 years probably could have been far more deadly if the terrorists only goal was death count. That's probably not what they're optimizing for, this is framing everything from the victim's point of view. Terrorists can be awful, but they still have motivations and are somewhat rational actors.
I'd be happy to change my view with evidence otherwise, but terrorists are still somewhat "rational actors" with goals that seem horribly irrational to most people. Killing 10 million people in a terrorist attack probably wouldn't serve their long-term goal (even terrorists worry about PR) and would be an incredibly difficult / expensive undertaking.
Terrorists are working as intended, not killing millions of people here but instead squabbling over dirt in a destabilized wasteland while the Russians explode them.
If you look at a major terrorist attack death toll, you'll probably find that it's within one order of magnitude of, say, a major riot death toll.
http://www.sickchirpse.com/top-10-most-devastating-terrorist...
http://listverse.com/2014/02/07/10-deadliest-riots-in-histor...
According to those, worst terrorist attack was 9/11, with ~6k deaths in a single day. Most of the riots in the riot list had larger death tolls (ranging from anywhere between ~7k in a single day, to over 1M over a period of time).
That's why black powder bombs are the highest technology terrorists actually use, because it is the most effective thing they actually can use.
EDIT Before you hypothesize about "stolen nukes" know that it is impossible to move a nuke undetected: http://www.rense.com/general16/nucla.htm
Terrorists and WMDs is fiction. And sometimes fiction is propaganda.
This is why every discussion of "nuclear terrorism" also includes "dirty bombs" because otherwise there would be no such topic as "nuclear terrorism."
Weaponized viruses is one. Other indirect ways such as triggering a large scale war, economic warfare, etc.
Wars are caused by over-estimating the terrorist threat.
You sure about that? There's a reason the US gives Pakistan billions in "aid".
Would you say that chance has increased, decreased or remained the same over the last 30 years?
As a non-American I would feel a lot safe if you just dismantle yours.
2. Actually, 2 > 1 also. If the goal was to demonstrate unsurmountable military power and Hiroshima had already happened, what's the point of Nagasaki?
3. Given the past record of violations to international treaties, it can be argued that if the Russians had not developed the capability to retaliate in kind, N >> 2 by now.
Fires gun at fleeing suspect, bullet hits _ -> deaths. Now, how does _ end up with 10 million deaths?
Well, the US Air Force for example has accidently dropped nuclear warheads on several occasions. They are designed to be really tough, but there is probably a non-zero chance a bullet could end up setting a defective one off.
Of course reality can be far stranger than fiction so I am unlikely to think of the most likely risk.
PS: The odds of terrorists being able to kill 10 million people tomorrow is so low it's really not worth considering.
First, getting a nuke while hard is not enough. Killing 10 million people takes either a really big nuke in just the right spot, or a large number of nukes.
Second, having a nuke is not enough you need to be able to correctly detonate on command which it which is harder than you might think.
Third, you need to transport it to a useful location as there not stored in the middle of city's.
Fourth, you need to decide using them is more useful than threating to use them.
Fifth, if your comparing them to US police then they need to target the US.
So, no it takes far more than picking one up to kill 10 million people.
PS: Simply killing lots of people is not that useful to a terrorist organization. Making nukes less useful than you might think.
China, US, India, Pakistan, Russia.....