AGP Executive Report

AI & Nuclear Risk: The Bulletin of the Atomic Scientists’ Doomsday Clock warning hit 85 seconds to midnight, with BAS urging AI to stay human-controlled and not become an existential risk. North Korea Cybercrime: A North Korea-linked group, WaterPlum (aka “Contagious Interview”), used fake AI/crypto job interviews to infect 30,000 devices in 100+ countries, stealing at least $10.7M in crypto and targeting IT professionals worldwide. Military AI Integration: Kim Jong-un ordered wider AI integration across North Korea’s offensive and defensive weapons, pushing automation in artillery and expanded defense production during inspections of major defense-industrial facilities. Seismic Fallout From Tests: New research says North Korea’s underground nuclear tests at Mount Mantap reactivated dormant fault lines, with earthquake activity intensifying over years after testing stopped. Space/Missile Watch: North Korea launched a ballistic missile into the sea off the east coast, prompting Japan and South Korea to convene security meetings. Defense Tech & Drones: North Korea continues to refine reconnaissance-strike capabilities with AI and drones, while regional cyber-defense warnings highlight the growing risk of disruptive attacks on critical services.

AI-Driven Military Modernization: Kim Jong Un ordered wider integration of artificial intelligence into North Korea’s offensive and defensive weapons, pushing automation in artillery production and expanding military output during inspections of major defence-industrial facilities, including 600mm rocket systems. Cybercrime as a Weapon: North Korea-linked WaterPlum (aka Contagious Interview) used fake AI-style job interviews to infect 30,000 devices in 100+ countries, stealing credentials from 7,000+ crypto wallets and draining about $10.71M. Nuclear Program Meets Earth Science: New research says underground tests at Mount Mantap may have reactivated dormant fault lines, with seismic activity around the site persisting and intensifying for years after 2006–2017 blasts. Nuclear Watchdog Pushback: Kim Yo-jong rejected a UN IAEA resolution targeting Pyongyang’s nuclear status, vowing to maintain the credibility of North Korea’s nuclear capabilities amid US threats. Regional Tech-Defense Context: South Korea showcased its K2 Black Panther tank upgrades for modern drone threats, including active protection and drone jamming—an arms-race signal for the peninsula’s tech-driven battlefield.

Cybercrime: Japan’s National Police Agency says North Korea-linked WaterPlum (aka “Contagious Interview”) infected 30,000+ devices in 100+ countries, stealing credentials from 7,000+ crypto wallets and moving about $10.71m (¥1.7b), using fake AI-style job interviews and malware disguised as technical assessments. Nuclear oversight: Kim Yo-jong rejects an IAEA resolution, calling it “anti-DPRK,” and vows Pyongyang will keep its nuclear status amid U.S. threats. Seismic science: A study on Mount Mantap reports 1,399 earthquakes (2008–2025) and warns that underground nuclear tests may have reactivated dormant faults, raising long-term monitoring concerns. Defense industry + AI: KCNA reports Kim Jong Un inspected munitions factories and ordered expanded artillery production, improved defense manufacturing tech, and wider AI/automation in offensive and defensive systems. Military production push: Separate KCNA coverage highlights Kim’s push to strengthen artillery and scale defense output through upgraded production infrastructure. Regional tech-security context: A separate report warns Greater Manchester faces a “hostile threat landscape,” including attempts to disrupt emergency services—mirroring the broader pattern of cyber targeting tied to state-linked actors.

Military & AI Push: Kim Jong Un toured major munitions factories and ordered expanded artillery output, faster modernization of production tech, and wider use of AI and automation in weapons making. Nuclear Standoff: Kim Yo-jong rejected a new IAEA resolution, saying Pyongyang will keep its nuclear-weapon status and calling the watchdog’s move “anti-DPRK.” Seismic Science: A study links North Korea’s Mount Mantap underground nuclear tests to reactivated dormant fault zones, with reports of roughly 1,399 earthquakes since 2008. Cybercrime via “Job Interviews”: WaterPlum/“Contagious Interview” hackers used fake AI-style recruiter offers to infect 30,000+ devices in 100+ countries, steal credentials from about 7,000 crypto wallets, and move at least ¥1.7 billion—prompting public attribution warnings by Japan’s NPA and the FBI. On-chain Malware Trend: Chainalysis warns attackers are increasingly hiding malware command-and-control instructions directly on public blockchains, making takedowns harder since the data can’t be simply removed.

IAEA Standoff: Kim Yo-jong rejected a UN nuclear watchdog resolution, calling it “anti-DPRK” and vowing North Korea will keep its nuclear-weapon status, framing the issue as self-defense against U.S. and other “hostile forces.” Cybercrime for Cash: Japan, the FBI, and partners say the North Korea-linked WaterPlum (“Contagious Interview”) campaign hit 30,000+ devices in 100+ countries, stealing data from 7,000+ crypto wallets and pulling in about $10.7m, using fake AI/crypto job interviews to deliver malware. Drone Supply Chain: Reports say North Korea is sending more workers to Russia’s Alabuga drone factory that produces Geran attack drones, raising questions about whether Pyongyang will soon receive drones or production know-how. Nuclear-Program Fault Lines: Coverage highlights claims that North Korea’s underground nuclear tests reactivated dormant earthquake faults near the test area, adding fresh concern about seismic risks. Military Tech in Practice: A South Korea combat training center story shows lasers replacing live rounds in drills, underscoring how simulation tech is being used to sharpen battlefield readiness. Regional Tech-Defense Signals: Japan keeps the door open to nuclear-powered submarines, a shift that could reshape propulsion and naval planning across East Asia.

North Korea Nuclear Program Watch: New satellite-based reporting says Pyongyang’s enrichment work is expanding again in 2026, with the IAEA relying on open sources since inspectors left in 2009. Seismic Science: Studies in Science link North Korea’s underground tests at Mount Mantap to long-lasting fault reactivation, with earthquake activity persisting and intensifying years after the last blast. Cybercrime & Crypto Theft: A North Korea-linked group, WaterPlum (Contagious Interview), used fake tech-recruiter interviews to infect 30,000 devices across 100+ countries, stealing credentials and moving at least $10.7m worth of crypto. Onchain Malware Trend: Researchers report a 440% surge in malware instructions stored on public blockchains, helped by unrestricted open-source AI, with state-linked groups including those tied to North Korea. Nuclear Deterrence Messaging: Pyongyang’s deputy defense minister reiterated that North Korea will keep building and strengthening its nuclear deterrent, framing denuclearization demands as unrealistic. Tech & Security Spillover: Separate reporting shows supply-chain attacks and new stealer malware families spreading through common software ecosystems, underscoring how fast cyber threats evolve.

Nuclear Geology: A new Science study says North Korea’s 2017 underground test at Punggye-ri (Mt. Mantap) reactivated long-dormant fault zones, with seismic activity rising to about 1,330+ earthquakes since 2017 and continuing to intensify through 2025. Defense Diplomacy: North Korea’s vice defense minister Kim Kang-il used China’s Xiangshan Forum to defend the nuclear program as “self-defensive,” while warning against U.S.-allied drills and pushing for “strategic communication” with Beijing. Drone Reliability: A separate editorial flags repeated drone demo crashes in South Korea as a reminder that real-world testing still lags behind export ambitions. Cybercrime Tech: Chainalysis reports a 420% surge in malware “dead drops” stored on public blockchains, with state-linked activity— including groups tied to North Korea—driving much of the growth, helped by open-source AI lowering barriers for attackers. Security Ops: A Pentagon memo shifts commercial drone/autonomous procurement toward the Defense Innovation Unit (DIU), making it the main entry point for unmanned tech partnerships.

Blockchain Cybercrime: Chainalysis reports malware instructions hidden in public blockchain transactions and smart contracts jumped 440% in a year, with North Korea- and Iran-linked state actors leading the surge as open-source AI lowers the barrier for attackers. Sanctions & Enforcement: A major US sanctions bill would broaden blanket penalties across Russia’s government and defense-industrial support, tightening pressure on evasion networks. Nuclear Standoff: Kim Yo Jong reiterates North Korea’s nuclear status is “absolute” with “no going back,” as Pyongyang rejects denuclearisation demands amid renewed Trump-Kim summit talk. Missile Deterrence: South Korea’s Missile Strategic Command marks its 20th anniversary, arguing survivable launch and bigger stockpiles are key to deterring Pyongyang’s nuclear threat. Drone & Tech Spillover: Ukraine says foreign-made machine tools from China, Japan, Germany and others are being used to modify Russia’s Geran drones—highlighting how industrial tech flows can feed warfare. North Korea Abroad: A monitoring group says overseas labor networks help fund North Korea’s nuclear and missile programs, while reports also link North Korean workers to Russia’s drone production. AI Security Debate: China’s Xiangshan Forum warns AI is compressing decision-making and increasing military risk, including around autonomous systems and misinformation.

Human Rights & Cross-Border Abuse: A North Korean defector testified at a U.S. House hearing about trafficking and sexual assault after crossing into China, highlighting how Pyongyang-linked networks exploit migrants beyond the border. Inter-Korean Legal Fallout: A Seoul court ordered North Korea to pay about US$32.5m (44.6bn won) in damages for blowing up the inter-Korean liaison office in 2020, a rare case targeting the North state directly. Sanctions-Evasion Labor Network: A UN-linked monitoring report says North Korea deployed tens of thousands of overseas workers in at least 17 countries in 2025, generating up to $800m a year and helping fund nuclear and missile programs. Defense Tech & Battlefield Learning: Estonia’s defense firms pitched South Korea on using Ukraine-derived lessons—especially unmanned aerial and ground systems—showing how real-world feedback is becoming a tech upgrade pipeline. Regional Security Posture: Reports also point to intensifying missile and drone pressures around the peninsula, while South Korea expands China flight capacity—an economic signal running alongside the security one. Critical Minerals Supply Chains: South Korea and Central Asian leaders agreed to build shared value chains in critical minerals and energy, aiming to move up the processing ladder with Korean technology.

Overseas Labor Revenue: A UN sanctions monitoring report says North Korea deployed 35,600–101,280 workers abroad in 2025, earning an estimated $450m–$800m, with most in China and Russia—despite UN bans—fueling nuclear and missile programs. Inter-Korean Legal Fallout: A Seoul court ordered Pyongyang to pay about US$32.5m (44.6bn won) for blowing up the 2010s Inter-Korean Liaison Office in Kaesong, a rare damages case against the North. Drone Rules at the Border: Three South Korean civilians received suspended prison terms for unauthorized drone flights into North Korea to film, after two drones crashed and Pyongyang analyzed wreckage and logs. Critical Minerals & Supply Chains: South Korea and five Central Asian presidents agreed to deepen cooperation on critical minerals and energy, aiming to build shared value chains that link regional resources with South Korean technology. Space Militarization Talk: US officials publicly discussed on-orbit “space control” weapons, adding fuel to concerns about an accelerating space arms race. Tungsten Supply Pressure: New reporting highlights how tungsten prices surged after China restricted exports, while the US pushes stockpiles and rules to rebuild a domestic supply chain. Regional Naval Posture: Japan’s plan for giant missile cruisers is framed as a response to growing ballistic and hypersonic threats from China, Russia, and North Korea.

Inter-Korean Tech & Diplomacy: A Seoul court ordered Pyongyang to pay about US$32.5M (44.6 billion won) for blowing up the Inter-Korean Liaison Office in 2020, the first time South Korea has sought damages directly from the North. Drone Enforcement: A Seoul court gave a graduate student a suspended sentence for flying drones into the Kaesong area, with prosecutors saying the flights recorded footage and evaded defenses. Military Tech Signaling: North Korea’s vice defense minister Kim Kang-il attended China’s Xiangshan Forum, pointing to renewed high-level military exchange. Nuclear Submarine Narrative Clash: Pyongyang accused the U.S. of pushing South Korea and Japan toward nuclear-powered submarines, using the claim to justify its own nuclear buildup. AI Safety Debate: A renewed global discussion on whether advanced AI could enable bioweapons and cyberattacks is resurfacing, with Anthropic-related warnings driving attention. Economy via Consumption Tech: Reuters reports Kim Jong Un is expanding state-controlled leisure and retail—massage equipment, treadmills, and luxury venues—using imports to tighten control and revenue. Russia Alignment: Kim pledged “invariable support” to Putin’s “sacred war,” reinforcing the tech-and-munitions exchange backdrop.

North Hamgyong Light Industry: A provincial “mass design creation” contest is forcing factory engineers and even general workers to submit consumer goods designs by Sept. 17, but clothing plants that already make garments only for Chinese orders complain the deadline and broad participation are impractical and exhausting. Space Security: The US Air Force says it has deployed “space control” weapons in orbit, raising fears of a more contested space environment where satellites supporting GPS, communications, and military intelligence could become targets. Russia-Ukraine-North Korea Link: Kim Jong Un sent Putin a letter pledging “invariable support” for Russia’s “sacred war,” signaling deeper cooperation as Pyongyang’s troop role in Ukraine continues. North Korea Nuclear/Missile Circle: Yun Tong-hyon, a former vice defense minister tied to munitions and believed to have worked on nuclear and missile development, has died, with KCNA praising his role in strengthening the regime’s “technological force.” South Korea Tech Security: Seoul’s expanded espionage law took effect Sept. 13, widening coverage beyond enemy-state activity and adding stronger protection for strategic technology like semiconductors and AI. South Korea Nuclear Submarine Push: Seoul’s “Chang Bogo N Project” is moving toward a mid-2030s nuclear-powered submarine, with early research funding and plans to build reactors domestically. AI Biosecurity: Reports highlight growing concern that AI could accelerate biological weapons research, with Anthropic saying it blocked attempts to use its models for such work.

Russia-North Korea Military Ties: Kim Jong Un sent Putin a letter promising “invariable support,” calling Russia’s Ukraine war “sacred,” as analysts watch for more Pyongyang troop deployments and deeper defense cooperation. North Korea Nuclear/Missile Leadership Loss: South Korean-linked reporting says former Vice Defense Minister Yun Tong-hyon—key to Pyongyang’s nuclear and missile push—has died, with state media crediting him for strengthening the “technological force.” AI Biosecurity Alarm: Anthropic says it blocked attempts to use its Claude for biological weapons research, adding to growing fears that frontier AI can speed up harmful pathogen design. Cybercrime & Remote Hiring Fraud: U.S. officials warn North Korea-linked networks are allegedly recruiting “fake” tech workers via third countries to land remote jobs at American firms, pushing companies to tighten identity checks. Defense Tech Supply Chains: The U.S. plans $450M to expand domestic tungsten processing, aiming to reduce dependence on China and counter pressure from rivals including North Korea. Energy/Industry Context: A week of coverage also highlights how sanctions and geopolitics are reshaping fuel flows and infrastructure deals across the region, with knock-on effects for military readiness and tech supply.

IAEA Nonproliferation: The IAEA Board voted unanimously to end Syria’s nuclear noncompliance review after Damascus renewed cooperation, but analysts warn the decision is premature given lingering questions tied to past work involving North Korea-linked plutonium reactor efforts. South Korea Tech-Security: Seoul’s expanded espionage law took effect Sept. 13, adding a new offense for stealing or transferring “national secrets” on behalf of any foreign country or equivalent organization—raising the stakes for semiconductor and AI-related leaks. North Korea Cyber Recruitment: U.S. officials say North Korea-linked networks are allegedly recruiting “fake IT workers” via third-country proxies in South Africa, Nigeria, India, and Iran to bypass hiring checks at American firms. Russia-North Korea Military Link: Reports claim Russia is preparing to send up to 50,000 North Korean troops to Ukraine, while a newly opened Russia-North Korea road bridge is raising concerns about a covert military corridor. AI Safety Push: Anthropic says it blocked Claude misuse for bioweapons and cyberattacks, as AI leaders call for slowing frontier development and stronger safeguards.

South Korea’s Espionage Overhaul: Seoul’s expanded espionage law took effect Sept. 13, widening spying charges from “enemy states” to any foreign country or organization, with minimum three-year prison terms—aimed at stopping semiconductor and other strategic tech leaks. North Korea’s Remote IT Infiltration: Reports say Pyongyang is using third-country “interview proxies” to evade hiring checks, placing workers into foreign firms and routing earnings back to fund weapons programs. AI Misuse Crackdown: Anthropic says it blocked Claude being used for bioweapons research, conventional weapons development, and cyberattacks, including a suspected Russia-linked effort—while broader AI safety calls grow louder. Cyber “9/11” Warning: Security experts warn major cities could face coordinated malware-and-drone attacks that knock out power and water, crippling hospitals and communications. Nuclear & Submarine Signals: Global nuclear warhead counts rose for the first time in years, while Japan and South Korea debates keep shifting toward nuclear-powered submarines and undersea deterrence. North Korea in Russia War Tech: Coverage highlights Pyongyang’s growing military partnership with Moscow, including claims of continued troop deployments and weapons support. North Korea’s Consumer Push: Reuters describes a state-managed “fun” and consumption boom—luxury imports and leisure spending—as a way to tighten control and generate revenue under sanctions.

North Korea-Russia tech and manpower ties: Reports say Pyongyang has sent over 16,000 personnel to Russia since Oct. 2024 and supplied more than 15 million artillery rounds, with Seoul also pointing to missile transfers—raising fresh questions about how China views a deeper Moscow-Pyongyang alignment. Diplomacy signal: Kim Jong Un replied to Xi Jinping, reiterating they will “always join hands,” while North Korea’s unusual publication of a UN chief’s full congratulatory message hints at cautious engagement. Espionage and chips: South Korea’s expanded espionage law now covers spying for any foreign country, with minimum three-year prison terms—explicitly aimed at stopping technology leaks tied to semiconductors and other strategic industries. Nuclear posture data: SIPRI says the number of deployed nuclear warheads rose in early 2026, even as total stockpiles keep sliding—highlighting renewed modernization pressure. Cyber recruitment scheme: US-linked reporting describes North Korea-linked IT worker recruitment and facilitation networks that help earn money abroad, including via job-interview pipelines and crypto laundering. NK “consumption” push: Reuters reviews describe a state-managed leisure and retail boom—massage equipment, malls, resorts—framing it as tighter control of commerce and new revenue channels. Missile show of force: North Korea fired guided rocket artillery from the KN-25 system, underscoring sustained pressure during regional drills. AI risk debate: A wave of coverage follows claims from an ex-Anthropic employee about catastrophic AI risk, alongside broader warnings about AI-enabled cyber and misuse.