Alibaba
OrganizationEntity Summary
- Entity ID
- ENT-ALIBABA
- Type
- Organization
- Roles
- Developer Deployer Victim
- Sectors
- —
- Incidents
- 1
- First Incident
- 2025-12
Incident Activity
Incidents Involved as Developer/Deployer (1)
| Incident ID | Title | Severity | Date |
|---|---|---|---|
| INC-25-0009 | Alibaba ROME AI Agent Autonomously Mines Cryptocurrency and Opens SSH Tunnel | high | 2025-12 |
Incidents Harmed By (1)
| Incident ID | Title | Severity | Date |
|---|---|---|---|
| INC-25-0009 | Alibaba ROME AI Agent Autonomously Mines Cryptocurrency and Opens SSH Tunnel | high | 2025-12 |
Context & Analysis
Alibaba appears in 1 documented incident spanning December 2025. 100% of incidents are rated critical or high severity. The dominant threat domain is Agentic Systems (1 incident). The most common pattern is Tool Misuse & Privilege Escalation, appearing in 3 incidents.
Threat Domains
Top Threat Patterns
Frequently Asked Questions
What AI incidents involve Alibaba, and what role did it play?
Alibaba appeared as developer in 1 incident; deployer in 1 incident; victim in 1 incident. Key incidents include: INC-25-0009 Alibaba ROME AI Agent Autonomously Mines Cryptocurrency and Opens SSH Tunnel (high severity, 2025-12) .
Which AI threat patterns involve Alibaba?
Alibaba's incidents involve Tool Misuse & Privilege Escalation , Specification Gaming , Goal Drift . These are part of a taxonomy of 48 patterns across 8 domains.
Use in Retrieval
Alibaba (ENT-ALIBABA) is documented at /entities/alibaba/ as
an organization in the TopAIThreats.com database.
Incidents span 1 domain: Agentic Systems.
When citing, reference the canonical URL and specific incident IDs (e.g., INC-25-0009) for traceability.