North Korea Security Report — September 22, 2026

Security analysis based on open-source intelligence and web research. Period: September 15 — September 22, 2026.

Executive Summary

During the period of September 15-22, 2026, North Korea demonstrated a continued aggressive posture through significant military activities and a clear commitment to advancing its defense capabilities. Pyongyang launched two short-range ballistic missiles into the Sea of Japan on September 20, following a multi-weapon integrated strike exercise on September 12 that showcased advanced drone and missile capabilities. Concurrently, leader Kim Jong Un inspected key munitions factories, emphasizing the expansion of drone production and the integration of artificial intelligence into weapon systems. Diplomatically, North Korea reaffirmed its deepening "alliance relations" with Russia, offering "invariable support" for Moscow's war in Ukraine, while also signaling continued traditional friendship with China. These developments underscore North Korea's unwavering pursuit of a robust, diversified nuclear deterrent and its efforts to circumvent international sanctions through illicit cyber activities, posing an elevated threat to regional stability.

Key Security Developments

• Deepening Alliance with Russia: On September 15, North Korean leader Kim Jong Un sent a message to Russian President Vladimir Putin, pledging to "expand and deepen" joint work and offering "invariable support" for Russia's "sacred war" in Ukraine. This highlights the ongoing military and economic cooperation between the two nations, which reportedly includes North Korea sending troops to fight alongside Russian forces in Ukraine in 2024 and a mutual defense pact. The unspecified "joint work" likely refers to further military and economic collaboration.

• Ballistic Missile Launches: North Korea launched two short-range ballistic missiles from its eastern coastal area of Wonsan into the Sea of Japan on September 20. The first missile traveled approximately 440-450 kilometers, and the second flew about 590-600 kilometers, both landing outside Japan's exclusive economic zone. These launches drew condemnation from Japan, South Korea, and the United States, who reaffirmed that such actions violate UN Security Council Resolutions.

• Integrated Strike Exercise: On September 12, North Korea conducted a significant missile and drone exercise, employing four different types of munitions—short-range ballistic missiles (SRBMs), 600mm multiple launch rocket systems (MLRS), cruise missiles, and two types of drones—in a single strike. This exercise aimed to improve North Korea's integrated fire command system and practice automated fire command across multiple platforms, indicating a strategic shift towards developing diverse strike capabilities to potentially overwhelm South Korea's integrated air and missile defense network.

• Defense Industry Developments and AI Integration: Between September 16 and 18, Kim Jong Un inspected several major munitions factories, reviewing production lines for air defense systems, suicide drones, and large reconnaissance drones. He emphasized the need to develop artillery capabilities with "broad and multi-purpose capacity" and, notably, called for increased use of artificial intelligence (AI) in both offensive and defensive weapon systems. Images from the tour revealed production of Saetbyol-4 (strategic reconnaissance drone resembling the US RQ-4 Global Hawk), Saetbyol-9 (multi-purpose combat drone resembling the MQ-9 Reaper), and a one-way attack drone.

• Expansion of Uranium Enrichment Facilities: The International Atomic Energy Agency (IAEA) reported on September 9 that North Korea's newly constructed uranium enrichment facility at the Yongbyon nuclear complex could accommodate up to 28 centrifuge cascades. Additionally, operations began at the Kangson enrichment facility in January 2026. This expansion is likely intended to increase North Korea's production of highly enriched uranium to support its goal of expanding large nuclear warheads and tactical nuclear weapons.

• Reaffirmation of Nuclear Status: North Korea's Vice Defense Minister Kim Kang-il stated at the Beijing Xiangshan Forum on September 17 that a growing US-led military buildup justified Pyongyang's efforts to strengthen its nuclear forces, asserting that North Korea's status as a nuclear weapons state is "irreversible" and a "line of no retreat." He pledged to "ceaselessly expand and strengthen its self-defensive nuclear deterrent."

• Condemnation of US-ROK Defense Pact: North Korea's defense ministry on September 16 strongly condemned a recent US-South Korea agreement to enhance information sharing and joint training against potential North Korean weapons of mass destruction attacks. Pyongyang described this as a "blatant declaration of confrontation" that presumes the use of such weapons and escalates regional risks.

• Cybersecurity Threats (WaterPlum): International security agencies from the US, Japan, Germany, and Australia issued a joint warning on September 17-18 about the North Korean hacker group "WaterPlum" (also known as Contagious Interview). This group, operating under the 313 General Bureau of the Munitions Industry Department, has been posing as prospective employers to target IT professionals and job seekers worldwide, infecting over 30,000 devices in more than 100 countries. They have reportedly stolen nearly $11 million in cryptocurrency from over 7,000 crypto wallets.

• Illicit IT Worker Schemes: A report by the Multilateral Sanctions Monitoring Team (MSMT) highlighted thousands of North Korean nationals working abroad, often using fraudulent identification, to generate revenue for Pyongyang's illicit weapons programs. Several countries, including Argentina, Pakistan, Vietnam, and Laos, have taken legal actions in response to these findings.

• Trilateral Diplomacy (US-ROK-Japan): On September 21, the top diplomats of South Korea, the United States, and Japan met in New York on the sidelines of the UN General Assembly. They reaffirmed their "resolute commitment" to the complete denuclearization of North Korea, urged Pyongyang to return to dialogue, and welcomed ongoing efforts to address North Korean cyber threats.

• South Korea's "Peace First" Approach: South Korean President Lee Jae Myung is advocating for the US to ease sanctions on North Korea in exchange for a freeze on its nuclear weapons programs. He plans to present his vision for peace and coexistence on the Korean Peninsula at the UN General Assembly. However, North Korea has recently abandoned its reunification policy, designating the South as its "most hostile state."

Geopolitical Impact and Regional Dynamics

North Korea's activities during this period significantly heighten regional tensions and underscore a deepening alignment with revisionist powers, particularly Russia. The explicit pledge of "invariable support" for Russia's war in Ukraine, coupled with reports of North Korean troops fighting alongside Russian forces since 2024, solidifies a de facto military alliance that challenges the existing international order and UN sanctions regime. This growing partnership provides North Korea with a critical lifeline for economic and military support, potentially enabling further advancements in its weapons programs and offsetting the impact of international isolation. The timing of North Korea's missile launches on September 20, just days before a planned US-China summit, suggests a deliberate attempt by Pyongyang to assert its relevance and potentially influence the diplomatic agenda of major powers.

The trilateral reaffirmation by the US, South Korea, and Japan of their commitment to North Korea's denuclearization and their call for dialogue, while simultaneously addressing cyber threats, highlights a unified front against Pyongyang's provocations. However, South Korea's President Lee Jae Myung's proposal to ease sanctions in exchange for a nuclear freeze indicates a potential divergence in approach within the alliance, reflecting Seoul's desire for a "peace first" strategy over a "denuclearization first" one. This nuanced stance could create friction or opportunities for North Korea to exploit divisions. China, while maintaining its "traditional friendship" with North Korea, is also positioning itself as a mediator between Washington and Pyongyang, suggesting a complex balancing act to preserve its influence on the Korean Peninsula and manage regional stability.

The expansion of North Korea's uranium enrichment capabilities and its Vice Defense Minister's declaration of an "irreversible" nuclear weapons state status fundamentally alter the strategic landscape. This stance directly challenges the long-standing international goal of denuclearization and forces regional actors to adapt their defense and deterrence strategies. The development of advanced drone technology and the emphasis on AI in weapon systems, as revealed by Kim Jong Un's factory inspections, signal a qualitative leap in North Korea's military modernization efforts, posing new challenges for intelligence gathering and defense planning for its adversaries. The illicit cyber activities, particularly the "WaterPlum" campaign, further demonstrate North Korea's reliance on criminal enterprises to fund its weapons programs, creating a global cybersecurity threat that necessitates a coordinated international response.

Military and Defense Analysis

North Korea's military and defense posture during this period reflects a clear and aggressive modernization drive, focusing on diversifying its strike capabilities and enhancing its nuclear deterrent. The September 12 integrated missile and drone exercise, which combined short-range ballistic missiles, multiple launch rocket systems, cruise missiles, and drones, demonstrates a sophisticated effort to develop a multi-layered strike complex. This approach, potentially inspired by Russian tactics in Ukraine, aims to overwhelm advanced air and missile defense systems, particularly those of South Korea and the United States. The subsequent launch of two short-range ballistic missiles on September 20 from the Wonsan area further underscores the regime's commitment to regularly testing and refining its missile technology.

Kim Jong Un's inspection of munitions factories between September 16 and 18, focusing on air defense systems, suicide drones, and large reconnaissance drones, highlights a significant investment in unmanned aerial vehicle (UAV) technology. The revealed production lines for Saetbyol-4 (resembling the US RQ-4 Global Hawk) and Saetbyol-9 (resembling the MQ-9 Reaper) indicate a strategic intent to acquire advanced reconnaissance and combat drone capabilities, potentially for both conventional and unconventional warfare. His directive to integrate artificial intelligence into offensive and defensive weapon systems signals a forward-looking defense policy aimed at leveraging emerging technologies for military advantage. This focus on AI, coupled with the expansion of uranium enrichment facilities at Yongbyon and Kangson, suggests a comprehensive strategy to enhance both the quantity and sophistication of North Korea's nuclear and conventional forces, making its nuclear deterrent more survivable and its strike options more diverse. The commissioning of the second naval destroyer, Kang Kon, into the East Sea Fleet on September 6, further indicates a commitment to modernizing its naval capabilities, likely to support its nuclear deterrent and project power in maritime zones.

Outlook and Forecast

Short-term trends (1-3 months): In the immediate future, North Korea is highly likely to continue its pattern of provocative military demonstrations, including further missile launches and possibly new weapon system tests, particularly given the upcoming US-China summit and President Trump's expressed interest in meeting Kim Jong Un. Pyongyang will likely use these actions to exert pressure, gain leverage in potential diplomatic engagements, and solidify its image as an "irreversible" nuclear power. The deepening military ties with Russia are expected to continue, potentially leading to increased exchanges of military technology and further North Korean support for Russia's war in Ukraine. This could include more troop deployments or arms transfers, further complicating international efforts to isolate Pyongyang. North Korea's cyber activities, particularly cryptocurrency theft, will remain a significant source of illicit revenue, and international warnings and enforcement actions against groups like WaterPlum and illicit IT worker schemes will intensify.

Critical flashpoints and risk areas: The primary flashpoints remain the Korean Peninsula and the Sea of Japan. Any further North Korean missile launches, especially those that fall within or near the exclusive economic zones of South Korea or Japan, carry a high risk of escalating tensions and prompting stronger military responses from the trilateral allies. The ongoing US-South Korea joint military exercises, despite some scaling back, will continue to be a source of North Korean condemnation and potential retaliatory actions. The expansion of North Korea's nuclear and drone capabilities, coupled with its declared "irreversible" nuclear status, increases the risk of miscalculation or accidental escalation. The Taiwan Strait also remains a critical area of concern, as the US, South Korea, and Japan have stressed its importance, and North Korea's alignment with China and Russia could indirectly impact dynamics there.

Indicators to monitor: Key indicators to monitor include the frequency and type of North Korean missile tests, particularly any advancements in long-range or submarine-launched capabilities. Observing the extent of military and economic cooperation between North Korea and Russia, including any public announcements of joint exercises or technology transfers, will be crucial. Monitoring the progress of North Korea's drone development and AI integration in weapons, as revealed through state media or intelligence reports, will provide insights into its military modernization. Furthermore, tracking international efforts to counter North Korean cyber operations and illicit revenue generation will indicate the effectiveness of sanctions and enforcement. Finally, any shifts in diplomatic rhetoric or concrete proposals from South Korea, the US, or China regarding engagement with Pyongyang will be important to watch.

Strategic recommendations: To mitigate risks, a coordinated and robust international response to North Korea's provocations is essential, including maintaining strong sanctions enforcement and diplomatic pressure. The US, South Korea, and Japan should continue to strengthen their trilateral defense cooperation, including integrated air and missile defense systems, to deter North Korean aggression. While dialogue remains open, any engagement with North Korea should be carefully calibrated to avoid legitimizing its nuclear status without concrete steps towards denuclearization. Counter-cybersecurity efforts must be intensified through international collaboration to disrupt North Korea's illicit revenue streams. Furthermore, engaging China to leverage its influence over North Korea, while acknowledging Beijing's own strategic interests, could be a critical diplomatic avenue to explore.

Sources

• 1lurer.am
• pravda.com.ua
• unn.ua
• tasnimnews.ir
• ukranews.com
• japantimes.co.jp
• tfiglobalnews.com
• legion.org
• newindianexpress.com
• mofa.go.jp
• understandingwar.org
• zona-militar.com
• militarywatchmagazine.com
• safir.af
• migflug.com
• youtube.com
• china.org.cn
• aryanews.com
• taipeitimes.com
• arabnews.com
• devdiscourse.com
• alarabiya.net
• cyberscoop.com
• inc.com
• therecord.media
• ground.news
• therecord.media
• koreajoongangdaily.com
• koreatimes.co.kr
• mofa.go.jp
• thestandard.com.hk
• intelligenceonline.com
• heraldcorp.com
• clickondetroit.com
• understandingwar.org