Name	SBA Research Cookie
Provider	SBA Research
Purpose	Saves the settings of the visitors selected in the cookie box.
Cookie name	sba-research-cookie
Cookie runtime	1 year

Name	YouTube
Provider	YouTube
Purpose	Used to unblock YouTube content.
Privacy policy	https://policies.google.com/privacy
Host(s)	google.com
Cookie name	NID
Cookie runtime	6 months

Name	Vimeo
Provider	Vimeo
Purpose	Used to unblock Vimeo content.
Privacy policy	https://vimeo.com/privacy
Host(s)	player.vimeo.com
Cookie name	vuid
Cookie runtime	2 years

New paper accepted for ACM CCS 2026

September 16, 2026

A new paper, “Automated Reasoning for Indistinguishability in the CCSA,” co-authored by Laura Kovács, key researcher at SBA Research and full professor at the Faculty of Informatics of the Vienna University of Technology (TU Wien), and Matteo Maffei, key researcher at SBA Research and Professor at TU Wien, has been accepted for presentation at the 33rd ACM Conference on Computer and Communications Security (CCS). Read More

Sebastian Schrittwieser on ORF’s ZIB 1: When AI developers warn about their own technology

September 15, 2026

In the ZIB 1 news broadcast of 13 September 2026, Sebastian Schrittwieser, key researcher at SBA Research and head of the CD-Lab AsTra, gave his assessment of the current debate about autonomously acting AI systems and of the calls from leading AI companies to slow down development. Read More

Sebastian Schrittwieser giving an interview

ARES 2026

August 31, 2026

The 21th International Conference on Availability, Reliability, and Security (ARES 2026) took center stage in Linköping, Sweden, from August 24 - 27, 2026, offering a platform for experts and enthusiasts to explore the latest developments in the field. The conference was jointly organised by Linköpings universitet (LiU) and SBA Research. Read More

SBA & ISC2 BBQ 2026

August 31, 2026

On a warm summer evening in August, we came together for our annual SBA BBQ. A tradition that brings colleagues, friends, and former team members together in a relaxed and welcoming atmosphere. Read More

New Article in heise iX magazine by key researcher Constanze Roedig

August 14, 2026

Constanze Roedig, key researcher at SBA Research, published an insightful article titled Software Supply Chain: “Bill of Behavior” as a Package Insert for Containers in heise magazine iX. Read More

Andreas Ekelhart visiting researcher @Edith Cowan University

August 5, 2026

Our colleague Andreas Ekelhart, key researcher and Applied Research Lead at SBA Research, spent 3 weeks in July 2026 as a visiting researcher at Edith Cowan University (ECU) in Perth, Australia, hosted by Prof. Helge Janicke and his research group. Read More

Sebastian Schrittwieser in Austrian TV and radio on the recent OpenAI security incident and the AI Act

August 3, 2026

Sebastian Schrittwieser, key researcher at SBA Research and head of the CD-Lab AsTra, was a guest in three ORF broadcasts in late July 2026, on the security incident involving an OpenAI model and the AI Act's new transparency obligations. Read More

New paper accepted @ 35th USENIX Security Symposium

July 31, 2026

New paper “Send and Pretend: Exploiting Transcript Consistency Issues in End-to-End Encrypted Group Chats”, was recently accepted for the 35th USENIX Security Symposium. The paper is a collaboration between SBA, the University of Vienna, and the Interdisciplinary Transformation University Austria (IT:U). It was authored by Gabriel K. Gegenhuber, Moritz Grefner, Maximilian Günther, Matthäus Wininger, David Schmidt, and Aljosha Judmayer. Read More

SBA Security Advisory – DFIR-IRIS Stored XSS (CVE-2026-16969, CVE-2026-18360, CVE-2026-18361)

July 30, 2026

The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (XSS) in the assets (CVE-2026-16969), custom attributes (CVE-2026-18360) and datastore upload (CVE-2026-18361) functions. Read More

SBA Security Advisory – DFIR-IRIS Missing Brute Force Protection (CVE-2026-16971, CVE-2026-18362)

July 30, 2026

The IRIS web application in version 2.4.26 and possibly others does not protect its MFA validation (CVE-2026-16971) and user authentication (CVE-2026-18362) against brute-force attacks. Read More

SBA Research is a research center for Information Security
funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.

Upcoming Events:

Recent News: