What is the official website of Alibaba Group ?

The official website of Alibaba Group is http://www.alibabagroup.com.

What is Alibaba Group's cybersecurity risk score?

Alibaba Group has an AI-generated cybersecurity risk score of 749 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has Alibaba Group experienced?

According to Rankiteo, Alibaba Group currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Alibaba Group been affected by any supply chain cyber incidents ?

According to Rankiteo, Alibaba Group has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Alibaba Group (Incident ID: ALIFAS1784996806) npm, Inc. (Incident ID: ALINPM1785831845) Langflow (Incident ID: 353844050725)

Does Alibaba Group have SOC 2 Type 1 certification ?

According to Rankiteo, Alibaba Group is not certified under SOC 2 Type 1.

Does Alibaba Group have SOC 2 Type 2 certification ?

According to Rankiteo, Alibaba Group does not hold a SOC 2 Type 2 certification.

Does Alibaba Group comply with GDPR ?

According to Rankiteo, Alibaba Group is not listed as GDPR compliant.

Does Alibaba Group have PCI DSS certification ?

According to Rankiteo, Alibaba Group does not currently maintain PCI DSS compliance.

Does Alibaba Group comply with HIPAA ?

According to Rankiteo, Alibaba Group is not compliant with HIPAA regulations.

Does Alibaba Group have ISO 27001 certification ?

According to Rankiteo,Alibaba Group is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Alibaba Group operate in ?

Alibaba Group operates primarily in the Software Development industry.

How many employees does Alibaba Group have ?

Alibaba Group employs approximately 84,600 people worldwide.

Does Alibaba Group own any subsidiaries ?

Alibaba Group presently has no subsidiaries across any sectors.

How many LinkedIn followers does Alibaba Group have ?

Alibaba Group's official LinkedIn profile has approximately 1,433,114 followers.

What is the NAICS classification code for Alibaba Group ?

Alibaba Group is classified under the NAICS code 5112, which corresponds to Software Publishers.

Does Alibaba Group have a Crunchbase profile ?

No, Alibaba Group does not have a profile on Crunchbase.

Does Alibaba Group have a LinkedIn profile ?

Yes, Alibaba Group maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/alibaba-group.

How many cybersecurity incidents has Alibaba Group experienced ?

As of September 26, 2026, Rankiteo reports that Alibaba Group has experienced 9 cybersecurity incidents.

How many peer or competitor companies does Alibaba Group have ?

Alibaba Group has an estimated 31,032 peer or competitor companies worldwide.

What types of cybersecurity incidents has Alibaba Group faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach, Vulnerability, Data Leak and Cyber Attack.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Alibaba Group

Boost Score +25 with badge (5 left)

749

/1000

Moderate

774

/1000

Fair

Alibaba Group Vendor Cyber Rating & Cyber Score

alibabagroup.com

Add Your Compliance Badge

🌍Alibaba Group is on a mission to make it easy to do business anywhere! Guided by our passion and imagination, we’re leading the way in AI, cloud computing and e-commerce. We aim to build the future infrastructure of commerce, and we aspire to be a good company that lasts for 102 years.

Alibaba Group

Alibaba Group CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Alibaba Group

Vulnerability

100

7/2026

Alibaba Group

ALIFAS178499680...

Alibaba Group

Cyber Attack

3/2026

ALI1773938860

Alibaba Group

Cyber Attack

3/2026

JUNALI177393033...

Alibaba Group

Cyber Attack

100

3/2026

npm, Inc.

ALINPM178583184...

Alibaba Group

Vulnerability

100

5/2025

Langflow

353844050725

Alibaba Group

Data Leak

09/2020

ALI11519623

Alibaba Group

Data Leak

01/2020

ALI150121222

Alibaba Group

Breach

100

09/2018

ALI212330922

Alibaba Group

Data Leak

09/2018

ALI138311022

Loading…

A.I.

Alibaba Group Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Alibaba Group

Incidents vs Software Development Industry Avg (This Year)

Alibaba Group has 273.83% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

Alibaba Group has 292.16% more incidents than the average of all companies with at least one recorded incident.

Incident Types Alibaba Group vs Software Development Industry Avg (This Year)

Alibaba Group reported 4 incidents this year: 3 cyber attacks, 0 ransomware, 1 vulnerabilities, 0 data breaches, compared to industry peers with at least 1 incident.

Incident History - Alibaba Group (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Alibaba Group Subsidiaries

Alibaba Group

Software Development

Website: http://www.alibabagroup.com

Company Size: 10,001+ employees

LazadaSoftware Development

Ververica | Original creators of Apache Flink®Software Development

Alibaba GroupSoftware Development

Alibaba Digital Media & Entertainment GroupTechnology, Information and Internet

UCWeb Inc.Technology, Information and Internet

Youku Tudou IncMedia Production

TmallTechnology, Information and Internet

Tmall GlobalTechnology, Information and Internet

Loading…

Alibaba Group Similar Companies

Dassault Systèmes

3ds.com

Dassault Systèmes is a catalyst for human progress. Since 1981, the company has pioneered virtual worlds to improve real life for consumers, patients and citizens. With Dassault Systèmes’ 3DEXPERIENCE platform, 370,000 customers of all sizes, in all industries, can collaborate, imagine and create sustainable innovations that drive meaningful impact. For more information, visit: https://www.3ds.com

Cisco

cisco.com

Cisco is the worldwide technology leader that is revolutionizing the way organizations connect and protect in the AI era. For more than 40 years, Cisco has securely connected the world. With its industry leading AI-powered solutions and services, Cisco enables its customers, partners and communities to unlock innovation, enhance productivity and strengthen digital resilience. With purpose at its core, Cisco remains committed to creating a more connected and inclusive future for all.

Amdocs

amdocs.com

Who are we? Amdocs helps those who build the future to make it amazing. With our market-leading portfolio of software products and services, we unlock our customers’ innovative potential, empowering them to provide next-generation communication and media experiences for both the individual end user and enterprise customers. Our employees around the globe are here to accelerate service providers’ migration to the cloud, enable them to differentiate in the 5G era, and digitalize and automate their operations. Listed on the NASDAQ Global Select Market, Amdocs had revenue of $5.00 billion in fiscal 2024. For more information, visit http://www.amdocs.com/ At Amdocs, our mission is to empower our employees to 'Live Amazing, Do Amazing' every day. We believe in creating a workplace where you not only excel professionally but also thrive personally. Through our culture of making a real impact, fostering growth, embracing flexibility, and building connections, we enable them to live meaningful lives while making a difference in the world.

UKG

ukg.com

UKG is the Workforce Operating Platform that puts workforce understanding to work. With the world's largest collection of workforce insights, and people-first AI, our ability to reveal unseen ways to build trust, amplify productivity, and empower talent, is unmatched. It's this expertise that equips our customers with the intelligence to solve any challenge in any industry — because great organizations know their workforce is their competitive edge.

Daraz

cb daraz.com

Founded in 2015, Daraz is the leading e-commerce platform in South Asia with operations in Pakistan, Bangladesh, Sri Lanka, Nepal, and Myanmar. It provides sellers and consumers with cutting-edge marketplace technology, targeting a rapidly growing region of over 500 million people. By building an integrated infrastructure covering e-commerce, logistics, payment and financial services, the company aims to deliver an immersive, personalized shopping experience and uplift South Asian communities through the power of commerce. Daraz has consistently invested in building an e-commerce ecosystem in South Asia through advancements in technology, logistics and digital payments. As digital penetration and consumer awareness have surged, the region is now ready for a transformative leap. Leveraging new-age advancements such as AI, Daraz is poised to further enhance the platform’s efficiency to enable a seamless experience for its consumers and sellers. Visit https://www.daraz.com/ to learn more.

Synopsys Inc

cb synopsys.com

Synopsys is the leader in engineering solutions from silicon to systems, enabling customers to rapidly innovate AI-powered products. We deliver industry-leading silicon design, IP, simulation and analysis solutions, and design services. We partner closely with our customers across a wide range of industries to maximize their R&D capability and productivity, powering innovation today that ignites the ingenuity of tomorrow.

TOTVS

cb totvs.com

Olá, somos a TOTVS! A maior empresa de tecnologia do Brasil. 🤓 Líder absoluta em sistemas e plataformas para empresas, a TOTVS possui mais de 70 mil clientes. Indo muito além do ERP, oferece tecnologia completa para digitalização dos negócios por meio de 3 unidades de negócio: - Gestão: ERPs, soluções cross e sistemas especializados visando garantir mais produtividade, eficiência e governança para os negócios; 💻 - Techfin: ERP Banking que oferece soluções de crédito B2B e pagamento, integrados a sistemas de gestão; 💸 - RD Station: Ferramentas digitais de marketing, vendas e relacionamento, para empresas de todos os portes e segmentos. 🚀 Nos últimos 5 anos, a companhia investiu R$3 bilhões em pesquisa e desenvolvimento para atender de maneira cada vez mais especializada empresas de 12 segmentos da economia, tornando-se um trusted advisor de seus clientes. A TOTVS é uma potência tecnológica que apoia a evolução de empresas de norte a sul do país. O Brasil, que faz, faz com TOTVS.

Meituan

meituan.com

Adhering to the ‘Retail + Technology’ strategy, Meituan commits to its mission that 'We help people eat better, live better'. Since its establishment in March 2010, Meituan has advanced the digital upgrading of services and goods retail on both supply and demand sides. Together with our partners we provide quality services for consumers. On 20 September, 2018, Meituan was listed on the Main Board of the Stock Exchange of Hong Kong. Meituan has always put customers first, and continuously increased its R&D investment in new technologies. Meituan will join hands with all partners to fulfill our social responsibility and create more values for the society.

Cox Automotive Inc.

coxautoinc.com

Cox Automotive is the world’s largest automotive services and technology provider. Fueled by the largest breadth of first- and third-party data fed by 2.3 billion online interactions a year, Cox Automotive tailors leading solutions for car shoppers, auto manufacturers, dealers, lenders and fleets. The company has 29,000+ employees on four continents and a portfolio of industry-leading brands that include Autotrader®, Kelley Blue Book®, Manheim®, vAuto®, Dealertrack®, NextGear Capital™, CentralDispatch® and Cox Fleet®. Cox Automotive is a subsidiary of Cox Enterprises Inc., a privately owned, Atlanta-based company with $23 billion in annual revenue. Cox Automotive has been included on Glassdoor’s Best Companies in Tech & AI 2026 and Best Place to Work in 2026 lists.

Loading…

NEWS

Alibaba Group CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 11, 2026 07:00 AM

China issues second warning on OpenClaw risks amid adoption frenzy

China's cybersecurity agency on Tuesday issued a second warning about security and data risks tied to OpenClaw, despite a rush among local...

Read Article

March 11, 2026 07:00 AM

OpenClaw - AI Marvel or Cybersecurity Nightmare?

People have flocked to the OpenClaw artificial intelligence agent since it was launched in November by Austrian programmer Peter Steinberger...

Read Article

February 27, 2026 08:00 AM

Alibaba Group debuts “Wonder on Ice” an immersive AI experience at Milan’s Sforza Castle for Milano Cortina 2026

Alibaba Group has launched “Alibaba Wonder on Ice” in Piazza del Castello Sforzesco, using AI and cloud technology to preview virtual retail...

Read Article

February 11, 2026 08:00 AM

China Revives Home-Grown Hacking Competition That Stirs Security Concerns

China's premier hacking competition recently returned with greater government involvement than ever before and a focus on using artificial...

Read Article

December 13, 2025 08:00 AM

Apple 0-Day Vulnerabilities Exploited in Sophisticated Attacks Targeting iPhone Users

Apple patches two WebKit zero-day flaws actively exploited in sophisticated attacks targeting specific iPhone users running iOS versions...

Read Article

October 04, 2025 07:00 AM

Alibaba shares climb to highest since 2021

Shares remain far below their 2020 peak, keeping valuations attractive compared with US tech giants.

Read Article

September 24, 2025 07:00 AM

Alibaba Statistics And Facts (2025)

Alibaba Statistics: Alibaba Group Holding Limited, the entity that began life in 1999, has come a long way since it was founded by Jack Ma,...

Read Article

September 10, 2025 07:00 AM

Letter to Secretary of Homeland Security Regarding National Security Risks of PRC-Linked Technology at the 2028 Los Angeles Olympic Games

The Select Committee on the Chinese Communist Party is raising serious national security concerns about the International Olympic...

Read Article

March 17, 2025 07:00 AM

Cybercriminals claim massive data breach at Taobao, 600M users potentially affected

Babuk ransomware, a threat actor targeting big enterprises, claims to have stolen data from Taobao, an Alibaba Group-owned online shopping platform.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-96795

SUMMARY

Horilla is an HR and CRM software. Prior to 2.0.0, HorillaListView.export_data in horilla_views/generic/cbv/views.py accepts an authenticated user's columns POST parameter, takes field_tuple[1], interpolates it into dynamic_fn_str as Python source, and passes the generated function definition to exec(). A crafted string that remains valid under ast.literal_eval can inject Python syntax into a default argument evaluated during function definition, allowing arbitrary operating-system commands to execute with the application process privileges, including root privileges in the shipped Docker image. This issue is fixed in version 2.0.0.

Published

Date2026-09-25

Updated

Date2026-09-25

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Impact Score

5.9

Exploitability

2.8

REFERENCES

CVE-2026-86066

SUMMARY

Horilla is an HR and CRM software. Prior to 2.0.0, approve_validate_attendance_request at /attendance/approve-validate-attendance-request/ changes attendance_validated, is_validate_request_approved, approved_by, and related pending-request state through an HTTP GET before calling attendance.save(), so Django does not require CSRF validation for the action. An unauthenticated attacker can cause a logged-in manager with attendance.change_attendance to make a top-level request that carries the manager's SameSite=Lax session cookie, silently approving attendance with the victim's privileges and attributing the approval to the victim in the audit trail. This issue is fixed in version 2.0.0.

Published

Date2026-09-25

Updated

Date2026-09-25

RISK INFORMATION (Score: )

cvss4

Base Score: 5.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-57449

SUMMARY

Actual is a local-first personal finance tool. Prior to 26.7.0, Actual Sync Server's CORS proxy is intended to let authenticated users fetch resources only from repositories listed in the official plugin allowlist. When `ACTUAL_GITHUB_TOKEN` is configured, the proxy automatically attaches the server's GitHub token to GitHub requests. The GitHub API allowlist check uses a raw `startsWith()` prefix test for `/repos/{owner}/{repo}` without requiring a path boundary after the repository name. If an allowlisted public plugin repository is `https://github.com/acme/plugin`, the proxy also accepts GitHub API URLs. Those URLs are outside the allowlisted repository but still pass because their API path starts with `/repos/acme/plugin`. The proxy then forwards the request with the server's `ACTUAL_GITHUB_TOKEN`, allowing any authenticated Actual user to read private GitHub resources reachable by that token. Version 26.7.0 fixes the issue.

Published

Date2026-09-25

Updated

Date2026-09-25

RISK INFORMATION (Score: )

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/actualbudget/actual/security/advisories/GHSA-m62c-5q34-f3cf

CVE-2026-92842

SUMMARY

The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose length is tracked separately from the string itself. The filter constructors duplicate the value with pestrdup(), which stops at the first NUL byte, while keeping the original length. When the filter later emits a line break it copies the recorded length out of the truncated allocation, reading past its end and placing adjacent heap bytes into the filter output.

Published

Date2026-09-25

Updated

Date2026-09-25

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

https://github.com/php/php-src/security/advisories/GHSA-88hq-2827-7pg6

CVE-2026-91768

SUMMARY

The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen.allowed_clients matches on a /96 prefix instead of the exact address. An attacker who can source an address sharing the first 96 bits with an allowed one passes the check and reaches the FastCGI endpoint.

Published

Date2026-09-25

Updated

Date2026-09-25

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

2.8

REFERENCES

https://github.com/php/php-src/security/advisories/GHSA-62xp-839h-2637

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

Alibaba Group Vendor Cyber Rating & Cyber Score

Alibaba Group A.I CyberSecurity Scoring

Alibaba Group CyberSecurity News & History

Alibaba Group Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Alibaba Group

Incidents vs Software Development Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Alibaba Group vs Software Development Industry Avg (This Year)

Incident History - Alibaba Group (X = Date, Y = Severity)

Alibaba Group Subsidiaries

Alibaba Group

Alibaba Group Similar Companies

Dassault Systèmes

Cisco

Amdocs

UKG

Daraz

Synopsys Inc

TOTVS

Meituan

Cox Automotive Inc.

Alibaba Group CyberSecurity News

China issues second warning on OpenClaw risks amid adoption frenzy

OpenClaw - AI Marvel or Cybersecurity Nightmare?

Alibaba Group debuts “Wonder on Ice” an immersive AI experience at Milan’s Sforza Castle for Milano Cortina 2026

China Revives Home-Grown Hacking Competition That Stirs Security Concerns

Apple 0-Day Vulnerabilities Exploited in Sophisticated Attacks Targeting iPhone Users

Alibaba shares climb to highest since 2021

Alibaba Statistics And Facts (2025)

Letter to Secretary of Homeland Security Regarding National Security Risks of PRC-Linked Technology at the 2028 Los Angeles Olympic Games

Cybercriminals claim massive data breach at Taobao, 600M users potentially affected

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

Alibaba Group CyberSecurity News & History

Alibaba Group Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Alibaba Group

Incidents vs Software Development Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Alibaba Group vs Software Development Industry Avg (This Year)

Incident History - Alibaba Group (X = Date, Y = Severity)

Alibaba Group Subsidiaries

Alibaba Group

Alibaba Group Similar Companies

Dassault Systèmes

Cisco

Amdocs

UKG

Daraz

Synopsys Inc

TOTVS

Meituan

Cox Automotive Inc.

Alibaba Group CyberSecurity News

China issues second warning on OpenClaw risks amid adoption frenzy

OpenClaw - AI Marvel or Cybersecurity Nightmare?

Alibaba Group debuts “Wonder on Ice” an immersive AI experience at Milan’s Sforza Castle for Milano Cortina 2026

China Revives Home-Grown Hacking Competition That Stirs Security Concerns

Apple 0-Day Vulnerabilities Exploited in Sophisticated Attacks Targeting iPhone Users

Alibaba shares climb to highest since 2021

Alibaba Statistics And Facts (2025)

Letter to Secretary of Homeland Security Regarding National Security Risks of PRC-Linked Technology at the 2028 Los Angeles Olympic Games

Cybercriminals claim massive data breach at Taobao, 600M users potentially affected

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo