Pakistan — TTP Insurgency and the Security State: Strategic Assessment
Strategic Intelligence Assessment | intelligencenotes.com
Bottom Line Up Front
Pakistan in mid-2026 is a nuclear-armed state under the most acute compound security crisis since 1971. The Tehrik-i-Taliban Pakistan (TTP) has reconstituted into a federated insurgent system operating from sanctuary inside Taliban-ruled Afghanistan, with kinetic activity in Khyber Pakhtunkhwa and the merged former tribal districts that has surpassed the violence baselines of 2008–2012. The Balochistan Liberation Army (BLA) and Baloch Republican Guard have transitioned from rural ambush to urban high-casualty operations against China–Pakistan Economic Corridor (CPEC) personnel and infrastructure. The civilian government under Prime Minister Shehbaz Sharif has been systematically subordinated to the Pakistan Army under Chief of Army Staff Field Marshal Asim Munir, whose self-promotion to five-star rank in May 2025 formalised what is now a hybrid military regime with a civilian fig-leaf.
Four structural realities define the Pakistani security state in 2026:
- The TTP–Afghan Taliban sanctuary alliance has rendered Islamabad’s traditional kinetic-coercion playbook strategically obsolete; cross-border airstrikes and special-operations raids have not degraded TTP combat power and have produced an open-conflict footing with Kabul that the Defence Minister Khawaja Asif characterised as “open war” in late 2025.
- Balochistan has crossed an insurgent threshold: the Jaffar Express train hijacking (March 2025), the suicide vehicle attacks on Chinese engineers in 2024–25, and BLA’s “Operation Herof” campaign cycle have transformed the province into the most lethal theatre per capita inside Pakistan and the highest-priority CPEC security liability for Beijing.
- Civil–military rupture is institutionalised, not contingent: the disqualification, imprisonment and electoral exclusion of Imran Khan and the Pakistan Tehreek-e-Insaf (PTI) — combined with the May 2025 amendments allowing extension of Munir’s tenure — have closed the constitutional pathway that historically enabled controlled regime rotation.
- The nuclear arsenal remains under the sole custodianship of the Strategic Plans Division, not the civilian Prime Minister. Pakistan’s full-spectrum deterrence doctrine, tactical nuclear weapons (Nasr/Hatf-IX), and short-warning postures persist; the security state’s coherence around the arsenal is the single highest-confidence assessment in the file.
Assessment: Pakistan is not collapsing. It is hardening into a militarised security state with diminishing legitimacy, expanding internal security expenditure, and a structurally broken relationship with both its largest creditor (China, frustrated by CPEC attrition) and its western neighbour (Afghanistan, now an active sanctuary for the TTP). The base case (45–55%) is multi-year stalemate at elevated violence levels. Regime-fracturing or martial-law transition is the secondary case (20–30%). State collapse remains low-probability (<10%) but the tail risk on nuclear command-and-control under a rapid succession crisis is the single most consequential global proliferation scenario currently active.
1. The TTP Reconstitution: From Defeated Network to Federated Insurgency
The TTP’s strategic trajectory since the August 2021 Taliban takeover of Kabul has been a textbook study in sanctuary-enabled insurgent reconstitution. Between 2014 and 2018, sustained Pakistani military operations — Zarb-e-Azb in North Waziristan and Radd-ul-Fasaad nationally — had degraded the TTP’s combat power to the point of operational fragmentation. Splinter factions, leadership decapitations, and the destruction of training infrastructure had reduced the organisation to a marginal actor.
The 2021 Afghan inflection reversed this trajectory entirely. Three mechanisms drove reconstitution:
Sanctuary restoration. The Afghan Taliban — bound to the TTP by ideological affinity, tribal kinship across the Durand Line, and historical debt — refused Islamabad’s demands to constrain TTP operations. Senior TTP figures relocated openly to Kunar, Nuristan, Paktika and Khost provinces. UN Security Council Monitoring Team reports through 2024–25 documented TTP camps, training infrastructure, and freedom of movement on Afghan territory. The Afghan Taliban’s General Directorate of Intelligence (GDI), under Haqqani-network influence, has prosecuted ISIS-K aggressively but has consistently shielded the TTP.
Organisational consolidation. Between 2020 and 2022, TTP emir Noor Wali Mehsud reabsorbed splinter factions including Jamaat-ul-Ahrar, Hizb-ul-Ahrar, and segments of the Hafiz Gul Bahadur group. The reconstituted TTP operates as a federated structure — central shura with sub-commands organised by Pakistani administrative geography — rather than the fractured network of 2018–20.
Weapons absorption. The August 2021 collapse of the Afghan National Defence and Security Forces (ANDSF) deposited an estimated US$7 billion in US-supplied military equipment into Afghan territory. A documented portion — night-vision optics, M4 carbines, M16 rifles, thermal-imaging equipment, and US-grade communications — has migrated to TTP units, materially upgrading their tactical capability. By 2024, captured TTP fighters were equipped to a standard exceeding much of the Pakistani Frontier Corps.
The kinetic outcome is measurable. According to Pakistan Institute for Conflict and Security Studies (PICSS) and South Asia Terrorism Portal (SATP) datasets, terrorist incidents in Pakistan rose from 220 in 2021 to over 1,560 in 2024, with 2025 trending higher still. Khyber Pakhtunkhwa accounts for the majority share, with the merged former FATA districts (North Waziristan, South Waziristan, Khyber, Bajaur, Mohmand) the kinetic core. Security forces casualties in 2024 reached the highest annual total in a decade.
2. The Khyber Pakhtunkhwa Theatre — Provincial Erosion
KP is the TTP’s primary theatre. The province presents a triple-overlay challenge: (i) the merged former tribal districts where state administrative penetration has historically been thin; (ii) settled districts including Dera Ismail Khan, Bannu, Tank and Lakki Marwat where the TTP has reactivated dormant networks; and (iii) the provincial government, run by PTI until the post-Imran Khan suppression and now in a contested administrative state, has lacked both political authority and federal coordination.
Specific tactical patterns in 2024–25:
- Targeted assassination of police and Counter-Terrorism Department officers in settled districts; the police force in Bannu, Tank and DI Khan has lost cohesion through cumulative attrition and fear-driven resignations.
- Mass-casualty attacks on military convoys and Frontier Corps posts in the merged districts, including vehicle-borne IEDs, complex assaults with multi-element raid teams, and sustained mortar harassment.
- Extortion and parallel governance: TTP units issue tax demands (“ushr” and “zakat”) to local traders, transporters, and even some elements of provincial bureaucracy. In segments of Tirah Valley and parts of South Waziristan, parallel jurisdiction has functionally re-emerged.
- High-profile prison and military operation strikes, including the Bannu Cantonment attack (July 2024) and the Bannu–Mir Ali corridor escalation cycles.
The provincial dynamic is critical for the federal calculation. KP cannot be conceded politically without legitimising TTP territorial demands. But the federal apparatus has neither the political will to install martial administration nor the kinetic capacity to clear and hold the merged districts at scale. The compromise — perpetual Frontier Corps and Pakistan Army deployments without integrated political settlement — is the operational status quo and is bleeding the security forces.
3. Balochistan — Insurgent Threshold Crossed
The Baloch insurgency, in its fifth iteration since 1948, has in 2024–26 crossed thresholds that prior cycles did not. Three indicators define the qualitative shift:
Urbanisation of the insurgency. Until 2022, Baloch militant operations were predominantly rural — ambushes on Frontier Corps convoys, gas pipeline sabotage, attacks on infrastructure in remote Mekran and Marri-Bugti tribal areas. The shift to high-casualty urban operations is now structural: the Karachi Stock Exchange complex attack (June 2020 precedent), the China Consulate Karachi attack (2018, 2024 attempt), the suicide assault on Confucius Institute Karachi University (April 2022) and the sustained 2024–25 campaign of vehicle-borne suicide attacks on Chinese engineering personnel in Karachi, Gwadar and Quetta represent a doctrinal evolution.
Capacity to seize and hold for short windows. The March 2025 BLA hijacking of the Jaffar Express in the Bolan district — with hundreds of passengers, multi-day siege, and security force casualties exceeding 30 — demonstrated a coordinated company-scale operation. The BLA’s Majeed Brigade (suicide unit) and Special Tactical Operations Squad have developed operational planning and force projection unprecedented in the previous insurgent cycles.
Anti-CPEC strategic targeting. BLA and BRG explicitly frame CPEC as a colonial extraction project; their targeting of Chinese personnel is deliberate and aims at imposing untenable security costs on Beijing. Confirmed Chinese national casualties in Pakistan since 2017 exceed 50, with multiple high-publicity incidents (the 2021 Dasu hydropower bus attack; the 2024 Karachi airport convoy attack; the 2025 Bisham/KKH cycle). These have produced documented Chinese diplomatic pressure on Islamabad — including reported requests for Chinese private security company (PSC) deployment with arms, which Pakistan has resisted on sovereignty grounds.
The Baloch insurgency cannot be resolved kinetically. The drivers — provincial economic exclusion, demographic anxiety over Pashtun and Punjabi settlement, the disappearance and extra-judicial killing campaign by intelligence services, and the systemic political marginalisation — are political problems. The Pakistani state has chosen the kinetic-suppression path consistently since 2005. The result is the present escalation.
4. The Pakistan–Afghanistan Open-War Footing
The deterioration of Pakistan–Afghan Taliban relations is the most consequential strategic shift in the South Asian theatre in the post-2021 period. The relationship that the Pakistani security establishment built and protected for thirty years — the Taliban as Pakistan’s “strategic depth” against India — has inverted into the principal security threat to the Pakistani state.
The escalation cycle in 2024–25:
- Pakistani airstrikes inside Afghanistan against alleged TTP camps in Paktika (March 2024) and subsequent strikes through 2025, with documented civilian casualties — UNAMA recorded 70 civilian deaths and 478 injuries inside Afghanistan in Q4 2025 alone from Pakistani operations.
- Afghan Taliban Border Forces engagement of Pakistani positions in Kurram, North Waziristan, and Chaman crossings; multiple closures of the Torkham and Chaman crossings with cumulative trade-disruption costs in the billions.
- The forced expulsion of approximately 1.8 million undocumented Afghan refugees from Pakistan since 2023, with the Pakistani government framing this as a security necessity and the Taliban framing it as a humanitarian provocation.
- Late-2025 Pakistani Defence Minister Khawaja Asif characterising the relationship publicly as “open war” — a verbal escalation without a corresponding military mobilisation, but a doctrinal acknowledgement that the strategic-depth premise has collapsed.
Islamabad has no good military options. A large-scale ground invasion of Afghanistan is politically impossible (it would replicate the Soviet and US strategic disasters); air operations are cost-imposing but not war-winning; and special operations raids have not interdicted TTP leadership or training infrastructure at any scale that affects kinetic activity inside Pakistan. Diplomatically, the Pakistani leverage over Kabul is limited: Afghanistan’s external trade has diversified through Iran (Chabahar), Central Asia, and bilateral arrangements with Russia and China.
The structural problem is that the Afghan Taliban regard the TTP as an internal Pakistani problem rooted in Pakistani state policy toward Pashtuns, not a Taliban responsibility — and to act against the TTP would fracture the Afghan Taliban movement itself, given the deep tribal and ideological overlap.
5. The Munir Era — Civil-Military Subordination as Doctrine
The institutional architecture of Pakistani governance in 2026 is the most asymmetrically militarised since the Zia ul-Haq period (1977–88). The relevant data points:
- The May 2023 PTI suppression following the May 9 protests — mass arrests, military court trials of civilians, the systematic disqualification of PTI candidates, and Imran Khan’s imprisonment on multiple convictions. The 2024 general election, conducted under these conditions, produced a Pakistan Muslim League–Nawaz (PML-N) coalition government with Pakistan People’s Party (PPP) participation, but with PTI-affiliated independents winning the largest single bloc — a result the security establishment managed through post-election engineering of the assembly.
- The May 2025 Field Marshal promotion of Asim Munir — only the second such promotion in Pakistani history (after Ayub Khan, 1959) — formalising his authority as the country’s senior military and political figure.
- The 26th Constitutional Amendment (October 2024) curtailing judicial independence and re-anchoring constitutional review in a constitutional bench composition the executive controls; combined with the prior amendments allowing extension of the Army Chief’s tenure.
- Suppression of provincial autonomy — particularly KP and Balochistan — through federal direct rule mechanisms, governor’s rule precedents, and operational control of provincial police forces under federal counter-terrorism mandates.
Field Marshal Munir’s strategic disposition is more ideologically forward than the careerist tradition of his predecessors. His public references to the Two-Nation Theory (April 2025), his explicit invocation of religious-civilisational framing, and his sustained Indian-threat rhetoric represent a doctrinal departure from the more transactional posture of Qamar Javed Bajwa (2016–22) and Ashfaq Parvez Kayani (2007–13). The April–May 2025 Pahalgam–Operation Sindoor crisis with India (Kashmir) — in which Munir’s posture was assessed by external observers as more escalation-tolerant than the historical norm — is the single highest-stakes data point on his strategic personality.
The civil-military rupture is no longer a recurring oscillation between democratic consolidation and military intervention. It is institutionalised: the constitutional, judicial, and electoral mechanisms that previously enabled rotation have been systematically closed.
6. The Nuclear Dimension
Pakistan’s nuclear arsenal — assessed at approximately 170 warheads, growing — is under the custody of the Strategic Plans Division (SPD) headquartered at Chaklala/Rawalpindi, an organisation operationally detached from civilian government and reporting through the National Command Authority chaired notionally by the Prime Minister but operationally dominated by the Army Chief.
Key parameters:
- Doctrine: Full-Spectrum Deterrence. Pakistan’s nuclear use is doctrinally calibrated to deter both Indian conventional incursion (the “cold start” scenario) and strategic-level Indian nuclear use. Tactical nuclear weapons, principally the Hatf-IX (Nasr) short-range battlefield system, exist explicitly to enable nuclear release at sub-strategic levels — a posture that compresses decision timelines and lowers the use threshold.
- Delivery systems: Shaheen-III (intermediate-range, ~2,750 km, covering all of India including the Andaman Islands); Babur ground-launched cruise missile; Ra’ad air-launched cruise; Ababeel multiple independently targeted re-entry vehicle (MIRV) test article (status uncertain through 2025); reported sea-based deterrence via Babur-3 and Khalid-class submarines.
- Command-and-control: SPD-managed two-person rule, dispersed storage architecture (warheads de-mated from delivery vehicles in peacetime), and a National Command Authority chain that the security establishment has consistently asserted is robust against insider threat, decapitation, and sabotage. External assessments (Carnegie, Stimson, FAS) have raised periodic concerns about insider risk and the implications of expanding tactical nuclear deployment on alert posture.
- The TTP / extremist insider threat has been the single most-discussed Pakistani nuclear-security concern in Western analytical literature since the 2009 GHQ Rawalpindi attack. Pakistani officials have consistently rejected the framing, citing the SPD’s vetting and physical-security regime. The 2026 environment — with TTP kinetic capability inside Pakistan at decade-high levels — does not have a confirmed nuclear-facility breach, but the assessment community treats this as a watch-list risk rather than a closed file.
The nuclear arsenal is the single most cohesive institution in the Pakistani state. It is also the principal reason the international system tolerates a level of internal insurgent activity that would, in any non-nuclear case, generate a more aggressive containment posture.
7. External Actors
China. Pakistan’s largest creditor and CPEC partner, with cumulative CPEC commitments exceeding US$60 billion. Beijing’s posture in 2026 is strategically committed but tactically frustrated. The repeated targeting of Chinese personnel in Balochistan and Sindh, the slow pace of Pakistani security guarantees, and the questions over Pakistani debt-servicing capacity have generated documented Chinese pressure for: (i) deployment of Chinese PSCs with arms inside Pakistan (resisted by Islamabad on sovereignty grounds, partially conceded for unarmed advisory roles); (ii) renegotiation of energy independent power producer (IPP) contracts with circular debt absorbed by Pakistan; (iii) prioritisation of CPEC Phase II commitments. Chinese strategic patience is significant — Pakistan remains the only South Asian state in the Belt and Road Initiative core — but the principal-agent dynamic has shifted: Beijing is now openly conditional in a way it was not in 2015–20.
United States. US–Pakistan relations have stabilised at a transactional, low-density floor since the Afghanistan withdrawal. The principal vectors are: (i) limited counter-terrorism cooperation on ISIS-K and Al-Qaeda residuals, with Pakistani territory used for over-the-horizon intelligence operations against Afghan-based targets; (ii) International Monetary Fund coordination — the United States has the dominant voice in the IMF programme that has kept Pakistan’s external accounts solvent through 2024–26; (iii) F-16 maintenance contracts that maintain a baseline military relationship. The Trump administration in 2025–26 has shown selective, transactional engagement, including a public expression of solidarity with Field Marshal Munir during the May 2025 India–Pakistan crisis that surprised analysts.
Saudi Arabia and Gulf states. The Gulf is Pakistan’s principal balance-of-payments lifeline outside the IMF — Saudi and UAE deposits in the State Bank of Pakistan, oil-on-deferred-payment facilities, and remittance flows from Pakistani labour. Riyadh’s 2023 strategic-investment package ($25 billion announced, partially deployed) is a structural pillar of the post-2022 economic stabilisation. The Gulf relationship is conditional on Pakistani positioning toward Iran (cool), the Houthis (formal opposition), and the Israel–Saudi normalisation track (silent). The Gulf states have no kinetic security interest in Pakistan beyond denying the territory to anti-Saudi networks.
India. The dominant strategic adversary. The Pahalgam–Operation Sindoor crisis (April–May 2025) — covered in the Kashmir assessment — produced the most acute India–Pakistan kinetic exchange since Kargil 1999, including reciprocal airstrikes, drone exchanges, and reported losses on both sides. The post-crisis equilibrium is fragile and the structural India–Pakistan dynamic is the central existential frame for the Pakistani security establishment.
Iran. Border tensions in Sistan-Baluchestan have produced the January 2024 reciprocal airstrikes (Iran into Pakistani Balochistan against Jaish ul-Adl; Pakistan into Iran against Baloch nationalist groups), the most direct Iran–Pakistan kinetic exchange in the modern period. Subsequently de-escalated through diplomatic channels but the precedent matters: the Pakistan–Iran border is now a live military front.
8. Three Escalation Scenarios
Scenario A — Stalemate at Elevated Violence (Base Case, 45–55%)
The trajectory of 2024–26 continues. TTP kinetic activity in KP and the merged districts persists at high levels with episodic spikes. Balochistan insurgency continues with periodic high-casualty attacks on Chinese personnel and CPEC infrastructure. Pakistan–Afghanistan border remains hot but does not escalate to full conventional war. The Munir-led security state consolidates further. India–Pakistan crisis cycles recur but are managed below full conventional threshold. China continues to absorb costs while pressuring Islamabad on security guarantees.
Indicators: PICSS terrorism casualty figures stable above 1,500 per year; CPEC project completion rates below 40% of targets; IMF programme renewals sustaining external accounts; military budget growth above inflation; PTI political suppression maintained.
Scenario B — Regime Fracture / Martial Law Transition (20–30%)
A combination of intensifying insurgency, economic crisis (debt default, currency collapse, IMF programme failure), and a high-cost India crisis fractures the current Munir-led arrangement. Two sub-paths: (i) formal martial law with constitutional suspension; (ii) intra-military succession with a new Army Chief installing a more confrontational or more accommodative posture. Civilian government becomes a residual category. PTI mass mobilisation is met with sustained military force.
Indicators: rupee collapse beyond 350/USD; CPEC project freeze; mass civilian protests with security-force casualties; assassination of senior political or military figures; constitutional suspension; Saudi/Chinese rescue package conditional on political restructuring.
Scenario C — Compound Crisis with Nuclear Implication (10–15%)
The high-impact tail. A combination of (i) a high-intensity India–Pakistan crisis crossing into conventional war; (ii) a TTP or BLA mass-casualty attack on a strategic facility (nuclear-related, not necessarily a warhead site); (iii) succession crisis at the top of the Pakistan Army; (iv) state-fragmentation in one or more provinces — produces a scenario in which the international system’s confidence in Pakistani nuclear command-and-control is acutely tested. Probability is low but consequence is the single highest in the South Asian threat picture.
Indicators: Indian conventional ground operations across Line of Control or international border; nuclear signalling beyond standard doctrinal posturing; Field Marshal incapacitation or assassination; Chinese military advisory deployment beyond unarmed status; US strategic communication shift from transactional to crisis management.
9. Strategic Implications
For the international system. Pakistan is a structurally unstable nuclear state inside a region with two other nuclear powers (India, China) and a near-nuclear capable adversary (Iran). The TTP–Afghan Taliban sanctuary alliance has produced a post-2021 security-environment deterioration that classical counter-insurgency frameworks cannot resolve. The Pakistani security state’s response — militarisation, civil-military subordination, kinetic suppression — has not produced a strategic outcome and is unlikely to.
For China. CPEC is the single most exposed Chinese overseas infrastructure investment to insurgent attrition. The 2026 question is not whether Beijing tolerates losses but whether the principal-agent relationship remains workable when the agent (Pakistani security forces) cannot deliver the security baseline the principal requires. Chinese PSC deployment is the structural inflection point.
For India. The Pakistani security state’s ideological hardening under Munir has elevated escalation risk in a way the Bajwa/Kayani period did not. Indian doctrinal preparation for short-fuse, high-tempo operations against Pakistani territory — Operation Sindoor — has tested but not resolved the lower bound of conventional operations beneath nuclear threshold.
For Afghanistan. The Pakistani–Afghan rupture removes the Pakistani strategic-depth premise that has structured Afghan policy in Islamabad since 1979. Whatever the post-rupture equilibrium, it cannot be the prior arrangement.
For OSINT and analytical practice. The Pakistani case is the cleanest contemporary illustration of insurgent reconstitution under sanctuary. The TTP’s 2018→2024 trajectory — from operational fragmentation to federated insurgency — under conditions of sanctuary, organisational consolidation, and weapons absorption is the textbook reference case. Vault cross-references: Sanctuary, Insurgent Reconstitution, Decapitation, Hybrid Warfare.
Sources
- Pakistan Institute for Conflict and Security Studies (PICSS), annual security reports 2021–2025.
- South Asia Terrorism Portal (SATP), Pakistan datasets, 2010–2025.
- UN Security Council Analytical Support and Sanctions Monitoring Team — 14th, 15th, 16th reports concerning ISIL (Da’esh), Al-Qaida and the Taliban (S/2024 and S/2025 series).
- UNAMA Quarterly Reports on Civilian Casualties, 2024–2025.
- International Crisis Group, “Pakistan’s TTP Resurgence” briefings, 2023–2025.
- International Monetary Fund Article IV consultations and Extended Fund Facility programme documentation, Pakistan, 2023–2026.
- Stimson Center, “South Asia Voices” — Pakistan civil-military and nuclear-security analysis, 2023–2026.
- Carnegie Endowment for International Peace, Pakistan nuclear posture and SPD assessments.
- Federation of American Scientists (FAS) Pakistan nuclear notebook updates.
- Dawn, The News International, Geo News, Tribune — Pakistani reporting cross-referenced for incidents and political developments.
- Hasht-e Subh, Afghan independent reporting on Pakistan–Afghanistan border dynamics.
- Indian Ministry of External Affairs and Press Information Bureau briefings on Pahalgam and Operation Sindoor (April–May 2025).
- Reuters, AFP, AP wire reporting on Pakistan security incidents and India–Pakistan crisis cycles.
Last updated: 2026-05-07. Assessment current to that date. Prepared by L. H. S. Brandão for intelligencenotes.com.