AGP Executive Report

North Korea Tech & Security: South Korea’s “Sky Dragon” (Cheonryong) long-range air-to-surface missile cleared its first successful technical flight test, a step aimed at countering North Korea’s hardened mountain command sites. Defense Posture: Seoul also moves to scale drone warfare fast, including plans to train “drone warriors” and fast-track low-cost suicide drones like K-Lucas to blunt North Korea’s unmanned threat. Cyber & Supply Chain: Researchers warn of ChocoPoC, a trojan hidden inside fake proof-of-concept exploit repos that steals passwords and files when security researchers run “safe” code. DeFi Malware: SlowMist flags a fake Polymarket arbitrage bot circulating via npm, with malicious packages designed to steal crypto wallet keys and developer credentials. Geopolitics Tech Link: Ukraine and Japan discussed drone cooperation while pointing to Russia–North Korea military ties as a shared security risk across Europe and the Indo-Pacific. Sanctions/Compliance: The UK FCA says sanctions controls are improving but still finds gaps in screening, governance, and frozen-asset handling. North Korea-Adjacent Tech Culture: Tourists book ahead to visit a Starbucks in Gimpo with views toward North Korea—an odd, tech-linked snapshot of the divide.

DPRK-China Tech Diplomacy: Kim Jong Un sent Xi Jinping a message pledging stronger DPRK-China ties, underscoring Beijing’s role as Pyongyang’s main economic lifeline and signaling continued cooperation in areas like construction, technology, agriculture, and tourism. Cyber & AI Security: A new wave of attacks shows how AI coding agents can speed up supply-chain compromise, while separate reporting highlights North Korea-linked malware that “gaslights” AI analysis tools with fake errors to mislead defenders. DeFi Aftershocks: Drift Protocol rebranded to Velocity DEX after a $280M exploit tied to Lazarus, including a stablecoin switch backed by Tether—another reminder that DPRK-linked cyber risk keeps reshaping crypto infrastructure. Cross-Border Infrastructure: A planned North Korea–Russia road bridge is still unlikely to open soon, with satellite imagery pointing to unfinished Russian-side work, potentially delaying logistics gains. Information Control at Home: Daily NK reports three children of top Pyongyang scientists were arrested after secretly reading banned South Korean novels via an SD card, showing tight monitoring even in elite circles. Regional Security Tech: South Korea’s drone push continues, with plans to train “drone warriors” and accelerate low-cost suicide drone deployment to counter DPRK unmanned threats.

North Korea-Russia ties, logistics tech: A planned road bridge linking the two countries looks unlikely to open on schedule, with satellite imagery showing Russia-side work still unfinished—an issue that could delay the first direct road link and slow expected boosts to cross-border movement. DPRK-China diplomacy: Kim Jong Un sent Xi Jinping a message pledging stronger DPRK-China “friendly relations,” underscoring how Beijing remains Pyongyang’s key economic lifeline as ties warm again. Naval hardware spotlight: North Korea has deployed its first Choe Hyon-class guided-missile destroyer, a major step up in shipbuilding scale and missile capacity, signaling continued expansion of its naval tech ambitions. Cybersecurity, malware delivery: New research highlights macOS malware that uses fake error messages to mislead AI-based analysis tools, while separate findings show ClickFix scams now serve payloads via API-driven backends and can evade common script scanning. Supply-chain attacks: Security researchers report hijacked npm and Go packages that trigger hidden execution through Visual Studio Code workspace loading, showing how developer tools are becoming attack paths. Crypto theft trend: June crypto theft fell about 7% to roughly $76M, though key incidents still show how attackers exploit critical control points. AI policy pressure: New York lawmakers advanced a FAIR News Act proposal to force disclosure when AI helps create news—aimed at limiting misinformation risks.

North Korea Naval Build-Up: Pyongyang has officially deployed its first Choe Hyon-class guided-missile destroyer, a 5,000-ton warship with 88 vertical launch cells and room for 104 missiles—framing it as the start of a bigger navy push. Drone Warfare Shift: South Korea says it will train its entire force—about 500,000 troops—as “drone warriors,” aiming to make unmanned systems a universal combat tool against North Korean threats. Sanctions Evasion Watch: A report says North Korea’s sanctioned coal and mineral exports rebounded sharply after UN oversight lapsed, with port activity rising nearly fivefold since 2019 and ships allegedly going dark to avoid detection. Cyber & Malware Threats: Microsoft and Trend Micro report phishing campaigns hitting hotels and hospitality groups with malicious zip files to gain long-term access, while separate coverage highlights evolving ransomware tactics built around stolen credentials. Diplomacy Over POWs: South Korea and Ukraine held “constructive” talks on two North Korean soldiers captured in Russia, with Seoul seeking transfer options aligned with international law and humanitarian principles. Nuclear Negotiations Record: Declassified transcripts from early 1990s inter-Korean nuclear talks show denuclearization efforts collapsing into disputes over inspections and scope.

Ukraine–South Korea Diplomacy: Foreign ministers Andrii Sybiha and Cho Hyun met in Seoul to discuss Moscow–Pyongyang cooperation and the fate of two North Korean soldiers captured in Russia’s Kursk region, agreeing to proceed under international law and humanitarian principles. Sanctions Evasion Watch: A Seoul-based rights group and Data Desk say North Korea’s sanctioned coal and mineral exports rebounded after UN monitoring lapsed, with port vessel activity at Nampho, Chongjin, Wonsan, Rason and Kimchaek rising nearly fivefold since 2019—suggesting ships go “dark” to dodge tracking and that defense-linked firms run the trade. Naval Build-Up: North Korea commissioned the 5,000-ton guided-missile destroyer Choe Hyon, signaling a shift toward surface strike capability across the Yellow Sea and plans for larger 10,000-ton “strategic” warships. Drone Warfare Shift (Context): South Korea announced plans to rapidly expand loitering munitions and drone training to counter North Korean unmanned threats, including K-Lucas loitering systems and mass operator qualification. Cultural Tech Angle: A feature highlights Hangul’s design by King Sejong—an example of science-led engineering in writing systems, with every consonant shaped to match mouth positions.

North Korea Naval Build-Up: Pyongyang commissioned its 5,000-ton destroyer Choe Hyon with 74 vertical-launch cells, signaling a shift toward naval strike reach across the Yellow Sea and a push for faster surface combatant production. South Korea Drone War Doctrine: Seoul will accelerate K-LUCAS loitering munitions and expand drone training to make unmanned systems routine across all services, with counter-drone defenses and faster fielding rules aimed at North Korean UAV threats. South Korea Rocket + Faster ISR: South Korea’s first four-stage solid-fuel classified rocket launch (GYŪB) targets quicker satellite coverage, aiming to cut the monitoring gap for North Korea activity. Cybercrime Pressure on DPRK: The U.S., South Korea, and Japan urged tougher enforcement against DPRK-linked cybercrime funding, focusing on crypto theft and IT worker schemes. Nuclear Arsenal Snapshot: SIPRI estimates North Korea’s warheads rose to about 60 and could grow further, underscoring why missile and drone upgrades keep accelerating. Russia-North Korea Tech Link: Reports say North Korea’s support for Russia in Ukraine is tied to deeper military cooperation and technology transfers that are now showing up in new North Korean platforms. China Leverage on Pyongyang: China’s reported suspension of North Korean coal imports adds pressure on Pyongyang and could shape whether U.S.-DPRK talks restart.

Naval Build-Up: North Korea commissioned the 5,000-ton guided-missile destroyer Choe Hyon, shifting strike power toward the Yellow Sea and signaling plans for bigger 10,000-ton “strategic” warships. Nuclear Arsenal Watch: SIPRI estimates North Korea’s warheads rose to about 60 by Jan 2026, with enough fissile material for at least 30 more. Cybercrime Pressure: The U.S., South Korea, and Japan urged tougher enforcement against cybercrime funding North Korea’s nuclear ambitions, targeting crypto theft and IT-worker schemes. AI Malware Threat: Researchers detailed North Korea-linked macOS.Gaslight, which uses prompt tricks to make AI security tools think their own analysis is failing. Russia-Ukraine Fallout: Ukrainian intelligence claims North Korean troops suffered 7,000 casualties fighting in Russia’s Kursk Oblast, as military ties with Moscow deepen. Diplomacy Timing: A former Trump aide says U.S.-DPRK talks could restart quickly if conditions shift, with Pyongyang feeling less pressure after Russia and China support. Regional Tech Cooperation: South Korea and Japan agreed to deepen defense exchanges, including AI and advanced technology collaboration.

North Korea nuclear build-up: SIPRI says global deployed warheads rose again in 2026; Pyongyang’s arsenal is estimated at 60 warheads, with enough fissile material for at least 30 more. Naval tech transfer: North Korea commissioned its biggest warship yet, the 5,000-ton Choe Hyon, with South Korean analysts pointing to Russian-made systems and deeper Moscow ties. Drone warfare arms race: South Korea is rolling out “drone warrior” training for 500,000 personnel and expanding drone fleets, while Kim Jong Un watched weapons tests and pushed a “deadly and destructive” posture. Cybersecurity & AI risk: North Korea-linked macOS.Gaslight malware uses prompt-injection tricks to gaslight AI triage tools, showing how attackers can disrupt AI-assisted security workflows. Regional defense tech cooperation: Japan and South Korea agreed to advance defense equipment talks and cooperate on AI and advanced tech, alongside renewed maritime search-and-rescue drills. Crypto security spillover: Q2 2026 hit a record for DeFi hacks, with North Korea-linked activity cited in major losses.

Defense Tech Cooperation: Japan and South Korea agreed in Seoul to deepen defense equipment and technology talks, including AI for defense, and to broaden maritime search-and-rescue drills after a nine-year gap. North Korea Weapons Posture: Kim Jong Un watched tests of a tactical ballistic missile “special mission” warhead, an upgraded multiple rocket launcher, and longer-range gun-howitzer shell accuracy, calling for a “deadly and destructive” offensive posture. Drone Warfare Race: South Korea unveiled plans to train 500,000 “drone warriors” and expand domestically made unmanned systems, while accelerating long-range suicide drone deployment to counter North Korea’s growing unmanned threat. Cybersecurity & AI Abuse: Researchers reported North Korea-linked macOS.Gaslight malware that uses prompt-injection tricks to make AI security tools think their analysis session is broken, targeting AI-assisted triage workflows. Energy Signals from the Border: Satellite and on-the-ground reports say Sinuiju’s nighttime darkness is easing, suggesting North Korea is turning to solar power to cope with chronic shortages. Naval Readiness Training: South Korean Marines rehearsed KAAV-7A1 ship-to-shore operations with U.S. Marines in Hawaii, highlighting allied littoral maneuver capability. Air Defense Test Incident: Daily NK reported a new North Korean anti-aircraft gun suffered a barrel rupture during rapid-fire testing, seriously injuring two officers.

Cybersecurity & AI Attacks: SentinelOne says North Korea-linked macOS.Gaslight malware uses prompt-injection tricks to make AI triage tools think an analysis session is broken, pushing them to abort or refuse work—highlighting a design-level weakness in how AI separates trusted instructions from untrusted input. Unmanned Warfare Race: South Korea announced a major drone push to train 500,000 “drone warriors” and field tens of thousands of drones by 2029, aiming to make unmanned systems a universal tool for every soldier, while expanding counter-drone tech. DPRK Weapons Testing: Kim Jong Un watched tests of a tactical ballistic missile “special mission” warhead, upgraded rocket artillery, and longer-range gun-howitzer shell accuracy, calling for a “deadly and destructive” offensive posture. Naval Tech & Readiness: South Korea and U.S. Marines rehearsed KAAV-7A1 ship-to-shore operations in Hawaii ahead of RIMPAC, underscoring allied littoral maneuver capability. Energy & Infrastructure: Satellite and on-the-ground reports suggest North Korea’s Sinuiju is turning on more lights at night, pointing to solar adoption to ease chronic power shortages. Defense Industry Context: Reports also note North Korea’s anti-aircraft gun rapid-fire test failure, injuring two officers, raising questions about rushed development and deployment.

North Korea Weapons R&D: Kim Jong Un watched tests of an upgraded 240mm, 24-tube multiple rocket launcher with guided rockets (about 90 km range), a tactical ballistic missile with a “special mission” warhead, and extended-range 155mm gun-howitzer shells (about 65 km), calling it “great technological progress” and pushing a more “deadly and destructive” offensive posture. South Korea Drone Shift: Seoul announced a rapid buildout of unmanned warfare, aiming to train 500,000 “drone warriors” and field tens of thousands of domestically made drones, with drones becoming a standard tool for all troops and a focus on countering North Korean unmanned threats. Naval Hardware: North Korea moved ahead with its navy modernization, commissioning the new-type multi-mission destroyer Choe Hyon after shakedown work, signaling continued expansion of sea-based deterrence. Energy & Cities: Satellite and on-the-ground reports say a border city near China is showing more nighttime lighting, suggesting North Korea is leaning into solar power to ease chronic energy shortages. Regional Tech Watch: Japan is renaming its air force to reflect a broader space mission, while Airbus and Kawasaki are studying an anti-submarine warfare variant of the U950 Eurodrone for long-endurance maritime monitoring.

North Korea Weapons Tests: Kim Jong Un oversaw trials of an upgraded 240mm 24-tube rocket launcher, a tactical ballistic missile warhead, and extended-range 155mm gun-howitzer shells, calling the results proof of “automatic, long-range and ultra-precision” progress and pushing a “deadly and destructive offensive posture.” South Korea Drone Push: Seoul announced a major drone shift: train 500,000 “drone warriors,” field drones as standard gear for all troops, and accelerate homegrown K-Lucas long-range loitering munitions plus counter-drone systems. Naval Modernization: Pyongyang moved forward with commissioning of the new multi-mission destroyer Choe Hyon, signaling continued naval capability upgrades. Cyber & Supply-Chain Security: Researchers disclosed an Amazon Q Developer flaw that could let attackers steal cloud credentials via malicious repositories, while separate reporting links North Korean activity to AI supply-chain compromise tactics. Regional Tech-Defense Context: Japan renamed its air force to reflect expanded space missions, including satellite debris monitoring and space awareness—an echo of how space and unmanned systems are reshaping defense planning.

North Korea Weapons Testing: Kim Jong Un watched major weapons trials aimed at upgrading strike power along the southern border, including a “special mission” tactical ballistic missile warhead, an upgraded 240mm 24-tube multiple rocket launcher with automated guidance and extended range, and extended-range artillery shells—KCNA framed the results as proof of “technological progress” and a push for a “deadly and destructive offensive posture” targeting South Korea and U.S. bases. South Korea Drone Buildout: In response, South Korea announced a rapid unmanned shift: training 500,000 “drone warriors” so every service member can operate drones as a “second personal weapon,” procuring tens of thousands of low-cost drones, and fast-tracking the domestically developed long-range loitering munition K-Lucas (reverse-engineered from Iran’s Shahed-136 concept), plus counter-drone defenses using lasers and high-power microwaves. Defense Policy Forum: Yonhap hosted a symposium on security policy amid weakening alliances and economic security risks, with calls for a practical, phased approach to the North’s nuclear issue and renewed dialogue. Tourism & Infrastructure: Kim inspected new facilities at the Wonsan-Kalma coastal resort, including a railway station and an emergency treatment center, as Pyongyang tries to draw more visitors for hard currency. Crypto Compliance Watch: CoinEx publicly disputed a Wall Street Journal report about Iran-linked flows, saying it has no Iran government ties and highlighting compliance steps and domain blocking since 2021.

DPRK Military Tech: Kim Jong Un watched weapons tests aimed at upgrading a “special mission” tactical ballistic missile warhead, an improved multiple rocket launcher, and longer-range gun-howitzer shell accuracy, while KCNA framed the results as boosting a “deadly and destructive” posture targeting South Korea and U.S. bases. Naval Buildout: Pyongyang commissioned the nuclear-armed destroyer Choe Hyon and laid out a five-year plan to build at least two higher-class surface ships per year, including a 10,000-ton cruiser, plus escort and special-purpose ships and underwater weapon systems. Cyber & AI Security: Microsoft and researchers linked North Korean activity to the Mastra AI npm supply-chain compromise, where malicious versions of 140+ packages spread credential-stealing code into AI app development pipelines; separately, a Rust macOS “Gaslight” backdoor used Telegram uploads and prompt-injection tricks to disrupt AI-assisted malware analysis. Crypto Crime Crackdown: The U.S. DOJ seized a Huione Group cloud account tied to laundering billions, with investigators describing infrastructure used to move fraud proceeds across blockchains—an ecosystem North Korea-linked groups have reportedly exploited. Frontline Tensions: Seoul and the UN Command disagree on whether North Korea’s fence and obstacle work in the DMZ buffer zone violates the 1953 armistice, with Seoul calling it a clear breach.

Naval Build-Up: Kim Jong Un commissioned the nuclear-armed destroyer Choe Hyon and ordered a rapid five-year surge in shipbuilding—at least two major surface ships per year, including a 10,000-tonne cruiser, plus escort and special-purpose vessels and new underwater weapon systems. Nuclear Order Stress: A new look inside the IAEA highlights how tighter secrecy and faster weapon tech are fraying the global nuclear safeguards system. AI in Warfare: Reporting on AI-assisted targeting shows how militaries are using machine analysis to speed strikes, while experts warn diplomacy and security decision-making can’t be fully automated. Cyber/Malware: SentinelLabs says a North Korea-aligned Rust macOS implant (“Gaslight”) uses prompt injection to make AI triage tools refuse analysis, alongside Telegram-based control and data-stealing. Crypto Sanctions Evasion: Investigations link a North Korea-linked $1.5B heist to Iran-linked wallets and trace billions through CoinEx, underscoring how exchanges can become cross-border laundering gateways. DMZ Tensions: Seoul and the UN Command disagree on whether Pyongyang’s fence and obstacle work inside the buffer zone violates the Armistice, with Seoul calling it a breach. Policy Signals: South Korea’s PM nominee Han Seong-sook frames North Korea as both “threat and compatriot,” as lawmakers press for clearer inter-Korean stance.

Naval Nuclearization: North Korea commissioned its largest-ever 5,000-ton destroyer, the Choe Hyon, after 14 months of trials, with Kim Jong Un saying the navy is advancing toward nuclear-armed maritime “strategic means” and hinting at bigger 10,000-ton ships and new bases. Missile/Combat Tech Transfer: Reporting links North Korea’s KN-23 ballistic missile to Russia’s Ukraine war use, pointing to improved accuracy and real-world testing that sharpens its battlefield value. Cyber Defense & AI Abuse: SentinelLabs says a North Korea-linked macOS backdoor used stacked prompt injection tricks to derail AI-assisted malware triage, while Five Eyes warns AI-driven cyberattacks could hit critical systems within months. Cybercrime Blending: NCC Group reports Iran-linked MuddyWater disguising espionage as ransomware, showing how state and criminal tactics are converging. Security Tech Ecosystem: The U.S. tested its Golden Dome missile defense system, using autonomous tracking and interceptors against drones and cruise missiles. Energy Storage Buildout: U.S. battery energy storage is surging, with 3.3 GW new capacity and a growing pipeline, but supply-chain bottlenecks for compliant components remain a near-term constraint. Border Defection: A North Korean soldier defected into South Korea after crossing the heavily fortified border, underscoring how Pyongyang’s tech-heavy barriers still fail.