North Korea Security Report — February 28, 2026

Security analysis based on open-source intelligence and web research. Period: February 21 — February 28, 2026.

Executive Summary

North Korea demonstrated a heightened focus on military modernization and nuclear expansion during the period of February 21-28, 2026. Leader Kim Jong Un explicitly stated a policy to "exponentially" increase the nation's nuclear weapons arsenal and enhance readiness for their use, unveiling new 600mm multiple launch rocket systems (MLRS) with strategic strike capabilities. Diplomatic overtures towards the United States were conditionally offered, contingent on Washington abandoning its "hostile policy" and acknowledging North Korea's nuclear status, while dialogue with South Korea was unequivocally rejected. Concurrently, Pyongyang solidified its strategic alliances with Russia and China, receiving congratulatory messages for its 9th Workers' Party Congress, which concluded with a significant military parade showcasing new weaponry and units reportedly deployed to Ukraine. Cybersecurity threats from state-sponsored groups like Lazarus and Kimsuky remained prominent, with continued spear phishing campaigns targeting financial and defense sectors to fund illicit weapons programs.

Key Security Developments

• Military Activities and Exercises: New 600mm MLRS Unveiled
  On February 27, 2026, North Korea showcased a large batch of 50 new 600mm multiple launch rocket systems (MLRS) based on the KN-25, capable of carrying nuclear warheads, at a ceremony in Pyongyang. Leader Kim Jong Un emphasized that these launchers "perfectly combine the accuracy and destructive power of tactical ballistic missiles with the firing speed of multiple rocket launchers" and are designed for "strategic," or nuclear, strikes, incorporating "AI technology and a combined guidance system." These systems were previously tested in January 2026, launching four missiles that hit a target at a distance of 358.5 km. The unveiling underscores North Korea's commitment to developing advanced conventional and nuclear-capable systems to deter perceived adversaries.

• Defense Policy and Strategic Shifts: Exponential Nuclear Expansion
  Kim Jong Un declared that North Korea is implementing a nuclear force construction policy to "exponentially" increase the number of nuclear weapons and enhance its readiness to use them. During the 9th Workers' Party Congress, which concluded on February 25, 2026, he outlined a five-year plan to strengthen the national nuclear force, expand nuclear operational means, and develop new weapon systems. This includes intercontinental ballistic missiles (ICBMs) that can be launched from underwater, an expanded arsenal of tactical nuclear weapons (such as artillery and short-range missiles targeting South Korea), attack systems using AI, unmanned drones, and anti-satellite weapons. This aggressive stance solidifies North Korea's self-proclaimed status as a nuclear-armed state.

• Diplomatic Relations: Conditional US Dialogue, South Korea Rejection
  On February 25, 2026, Kim Jong Un signaled conditional openness to dialogue with the United States, stating that improved relations hinge on Washington abandoning its "hostile policy" and respecting North Korea's "current status" as a nuclear-armed state. However, he explicitly rejected any possibility of negotiations with South Korea, branding it the "most hostile enemy" and warning that North Korea "can initiate arbitrary action" if Seoul engages in "obnoxious behaviour," even suggesting "South Korea's complete collapse cannot be ruled out." South Korea's Unification Ministry expressed regret over the hostile rhetoric but affirmed its commitment to peaceful coexistence.

• Diplomatic Relations: Strengthening Ties with Russia and China
  Russia and China sent congratulatory messages to North Korea for its 9th Workers' Party Congress, which opened on February 19, 2026. Dmitri Medvedev, Deputy Head of Russia's Security Council, highlighted the "strategic partnership" and joint efforts to repel external pressure and ensure stability in the Asia-Pacific region. China's Communist Party emphasized shared socialist goals and promoting stable, long-term development. This comes amidst reports of a "de facto military alliance" between North Korea and Russia, formalized by the 2024 Comprehensive Strategic Partnership Treaty, with North Korea reportedly participating in Russia's war in Ukraine.

• Military Parade and Threat Posture
  A military parade was held on February 25, 2026, in Pyongyang's Kim Il Sung Square, marking the conclusion of the 9th Workers' Party Congress. The parade featured 50 marching formations, including various branches, arms, and specialized units of the North Korean military, as well as an aerial parade. Notably, "overseas operations unit formation" and "overseas engineering regiment formation," reportedly dispatched to the war in Ukraine, participated, alongside units guarding the southern national border front. Kim Jong Un used the occasion to threaten "immediate and merciless retaliatory strike against any force that carries out military hostile acts."

• Defense Acquisitions and Arms Deals: Accelerated Missile Production
  Kim Jong Un ordered munitions factories to accelerate the production of missiles and construct more factories to meet the military's growing needs. This directive is part of a five-year defense development plan. Analysts suggest this increased production is aimed at improving precision strike capabilities, challenging the US and South Korea, and potentially for export to Russia. North Korea is also reportedly seeking advanced military technologies from Russia, including nuclear-powered submarine capabilities and fighter jets.

• Cybersecurity Threats: Lazarus and Kimsuky Activities
  North Korean state-sponsored hacking groups, including the Lazarus Group and Kimsuky, continued to pose significant cybersecurity threats. The Lazarus Group is suspected of being behind a $1.4 billion Bybit hack on February 21, 2026, and a $30 million exploit targeting the South Korean crypto exchange Upbit. These groups primarily utilize spear phishing attacks, often disguised as "lecture invitations or interview requests," to steal funds. The FBI released a FLASH alert regarding Kimsuky's evolving tactics, specifically mentioning the use of malicious QR codes in spearphishing campaigns targeting US entities. These illicit cyber activities generate revenue for North Korea's unlawful weapons of mass destruction (WMD) and ballistic missile programs, with over $2 billion in cryptocurrency stolen in 2025.

• Intelligence Activities: Report on Reconnaissance General Bureau (RGB)
  On February 21, 2026, the Committee for Human Rights in North Korea (HRNK) released a 100-page report detailing the activities of North Korea's Reconnaissance General Bureau (RGB). This report likely sheds light on the regime's intelligence operations, including espionage, cyber warfare, and illicit activities used to support its strategic objectives.

Geopolitical Impact and Regional Dynamics

North Korea's recent security developments significantly heighten regional instability and reshape its relations with major powers. The explicit commitment to "exponentially" increase its nuclear arsenal and develop advanced delivery systems, including underwater-launched ICBMs and tactical nuclear weapons, signals a more aggressive and less negotiable stance on denuclearization. This directly challenges the United States' long-standing policy of complete denuclearization and forces Washington to reconsider its strategic approach, potentially leading to increased military posturing and missile defense enhancements in the region by the US and its allies. The conditional openness to dialogue with the US, while rejecting South Korea, suggests Pyongyang aims to elevate its international standing by demanding recognition as a nuclear state, attempting to drive a wedge between Washington and Seoul.

The deepening "strategic partnership" with Russia, described by some as a "de facto military alliance," and continued strong ties with China, further complicate regional dynamics. This alignment provides North Korea with crucial economic and military support, potentially blunting the effects of international sanctions and enabling its weapons development. The participation of North Korean units in the military parade reportedly dispatched to the war in Ukraine underscores this growing military cooperation with Russia, raising concerns about technology transfers and a more robust anti-Western bloc. China's continued emphasis on shared socialist goals, while not explicitly endorsing North Korea's military build-up, provides a diplomatic shield and economic lifeline, allowing Pyongyang to maintain its assertive posture.

The complete rejection of dialogue with South Korea and the explicit threats of "complete collapse" for its southern neighbor mark a dangerous escalation in inter-Korean relations. This "hostile two states" policy eliminates immediate prospects for inter-Korean reconciliation and increases the risk of localized provocations along the heavily fortified border. The regional security landscape is thus characterized by a hardening of alliances, increased military competition, and a reduced diplomatic space, making the Korean Peninsula a critical flashpoint in broader geopolitical tensions.

Military and Defense Analysis

North Korea's military posture is undergoing a significant and rapid modernization, driven by Kim Jong Un's directive to "exponentially" increase nuclear weapons and expand their operational capabilities. The recent unveiling of 50 new 600mm KN-25 MLRS, explicitly designated for "strategic" (nuclear) strikes and incorporating "AI technology and combined guidance systems," highlights a focus on developing highly accurate and destructive tactical nuclear delivery systems. These systems, with a tested range of 358.5 km, pose a direct threat to South Korea and US forces in the region. The emphasis on developing underwater-launched ICBMs, advanced tactical nuclear weapons, unmanned drones, and anti-satellite capabilities indicates a comprehensive strategy to diversify its strike options and enhance its ability to project power and deter adversaries across multiple domains.

Defense spending trends, while opaque, are clearly on an upward trajectory, fueled by the accelerated production orders given to munitions factories for missiles and the construction of new facilities. This domestic industrial expansion, coupled with reported military technology transfers from Russia, particularly for nuclear-powered submarines and fighter jets, suggests a concerted effort to overcome existing capability gaps and enhance its conventional and strategic forces. The military parade on February 25, 2026, showcased not only new weaponry but also the presence of "overseas operations unit formation" and "overseas engineering regiment formation" reportedly deployed to Ukraine, indicating a willingness to engage in foreign military operations and potentially gain combat experience. This force posture, characterized by a growing and diversified nuclear arsenal, advanced conventional systems, and external military cooperation, aims to solidify North Korea's position as an undeniable nuclear power and enhance its leverage in international relations.

Outlook and Forecast

Short-term trends (1-3 months): In the immediate future, North Korea is highly likely to continue its aggressive military posturing and weapons development. The explicit rejection of dialogue with South Korea and the conditional stance towards the US suggest that Pyongyang will maintain a hardline approach, using its expanding nuclear capabilities as a primary bargaining chip. We can anticipate further missile tests, potentially including those for the newly unveiled 600mm MLRS or other advanced systems like cruise missiles, to demonstrate enhanced capabilities and operational readiness. Cybersecurity attacks by state-sponsored groups are also expected to persist, targeting financial institutions and defense sectors globally to generate revenue for the regime's illicit programs. The upcoming annual military exercises between South Korea and the United States in March will likely serve as a pretext for North Korea to escalate its own military demonstrations and rhetoric.

Critical flashpoints and risk areas: The most critical flashpoints remain the Korean Peninsula itself, particularly along the Military Demarcation Line and maritime borders, given North Korea's explicit threats against South Korea. Any perceived "obnoxious behaviour" or joint military exercises by South Korea and the US could trigger a swift and disproportionate response from Pyongyang. The potential for miscalculation or accidental escalation is high. Furthermore, the ongoing cyber activities, especially those targeting critical infrastructure or financial systems, carry a significant risk of broader economic disruption and international retaliation. The deepening military cooperation with Russia, including potential technology transfers for advanced weapons, could also lead to increased tensions with the US and its allies.

Indicators to monitor: Key indicators to monitor include any further missile launches, particularly those involving new technologies or longer ranges, which would signal advancements in North Korea's strategic capabilities. Statements from Kim Jong Un or other high-ranking officials regarding nuclear doctrine, military exercises, or inter-Korean relations will provide insight into the regime's intentions. The nature and frequency of cyberattacks attributed to North Korean groups should be closely watched for shifts in targets or tactics. Developments in North Korea's relations with Russia and China, such as high-level visits, economic agreements, or reports of military assistance, will be crucial for understanding the evolving geopolitical alignment. Finally, any changes in the US's diplomatic approach or the outcomes of potential US-China discussions regarding North Korea would be significant.

Strategic recommendations: To mitigate risks, a multi-faceted approach is recommended. Firstly, maintaining a robust combined defense posture with South Korea and Japan is essential to deter North Korean aggression and ensure regional stability. Secondly, a coordinated international effort to counter North Korea's illicit cyber activities, including enhanced intelligence sharing and sanctions enforcement, is crucial to cut off funding for its WMD programs. Thirdly, while North Korea has rejected dialogue with South Korea, exploring avenues for de-escalation and communication through third parties, such as China, could be beneficial. Finally, the international community should continue to press for the complete, verifiable, and irreversible denuclearization of North Korea through diplomatic means, while acknowledging the current reality of its nuclear status as a starting point for potential future negotiations with the US.