First of all, al Qaeda is not into small-scale attacks. Second, they prefer to engage in multiple, coordinated attacks. My best guess is that if there is another AQ attack, it will be shipborn, and in NYC the most vulnerable point is the East River.
They would have to use small boats because ships usually don't travel into the East River because of the currents and bridges.