×
Security

Critical Unauthenticated PHP RCE Is Being Exploited — ESA Managed Rules Already Block It

Two critical memory-corruption flaws in PHP's request-parsing path, disclosed on October 21, 2026 and dubbed "PHP2Shell," allow unauthenticated remote.

Alibaba Cloud Recognized as a Notable Vendor in Forrester's "The Web Application Protection Platforms Landscape, Q3 2026"

This blog post introduces Alibaba Cloud’s recognition as a Notable Vendor in Forrester's Q3 2026 WAPP Landscape, showcasing its robust web security.

Security New Features in September 2026

This blog post summarizes the feature updates for Alibaba Cloud Security Products targeting international markets in September 2026.

Security New Features in August 2026

This blog post summarizes the feature updates for Alibaba Cloud Security Products targeting international markets in August 2026.

Introducing Qoder Code Security: Security From the First Line of Code

Qoder's native code security is now available. Qoder Desktop and Qoder CLI are the first to support it, with other Qoder products to follow in upcoming releases.

Security New Features in July 2026

This blog post summarizes the feature updates for Alibaba Cloud Security Products targeting international markets in July 2026.

Alibaba Cloud ID Verification: Qwen-Powered Detection and Response for Financial-Grade Identity Security

This blog post introduces Alibaba Cloud's new Detection and Response feature for facial authentication, using the Qwen to identify syndicate and device risks.

Alibaba Cloud SecOps Agent: A Revolutionary Cross-Product Security Operations Experience

This blog post introduces the Alibaba Cloud SecOps Agent, an AI assistant that automates security operations via natural language to combat tool sprawl.

Qoder Security Officially Launches: Assigning a Dedicated Security Engineer to Every Developer

Qoder's native code security is now available. Secure your code from the very first line.

Security New Features in June 2026

This blog post summarizes the feature updates for Alibaba Cloud Security Products targeting international markets in June 2026.

Add Free AI Captcha to Your Website without Change Anything of Your Existing Code! Powered by ESA.

As AI becomes increasingly widespread, developing AI-powered web scrapers or using AI to generate scraping code has become remarkably straightforward.

How to Secure Alibaba Cloud Servers: Complete Hardening Guide

This article introduces a comprehensive guide to hardening and securing Alibaba Cloud servers.

Implementing Zero Trust Architecture on Alibaba Cloud

This article introduces the practical implementation of Zero Trust Architecture on Alibaba Cloud.

Security New Features in May 2026

This blog post summarizes the feature updates for Alibaba Cloud Security Products targeting international markets in May 2026.

What is Post-Quantum Encryption - And How to Enable It on ESA

Here's where it gets interesting for practitioners. While post-quantum cryptography might sound like something that requires complex migration project...

How Alibaba Cloud ESA Prevents Domain Fronting

This article provides a deep-dive into the protocol-level mechanics of Domain Fronting and demonstrates how Alibaba Cloud ESA (Edge Security Accelerat...

From an 18-Year-Old Hidden Nginx Vulnerability to the Evolution of Gateway Security Architecture

This article analyzes the root causes of the 18-year-old Nginx vulnerability (CVE-2026-42945) and explores the evolution of gateway security architecture.

Security New Features in April 2026

This blog post summarizes the feature updates for Alibaba Cloud Security Products targeting international markets in April 2026.

Managing Encryption Keys and Secrets with Alibaba Cloud KMS

This article examines how Alibaba Cloud KMS centralises cryptographic key management and secret storage for production IoT pipelines, covering envelop.

Alibaba Cloud Releases Agentic NDR,Ushering Threat Detection and Response into the Age of Agents

This article introduces Alibaba Cloud's "Agentic NDR," a product that marks the entry of threat detection and response technology into a new era dominated by AI agents.