Name	SBA Research Cookie
Provider	SBA Research
Purpose	Saves the settings of the visitors selected in the cookie box.
Cookie name	sba-research-cookie
Cookie runtime	1 year

Name	YouTube
Provider	YouTube
Purpose	Used to unblock YouTube content.
Privacy policy	https://policies.google.com/privacy
Host(s)	google.com
Cookie name	NID
Cookie runtime	6 months

Name	Vimeo
Provider	Vimeo
Purpose	Used to unblock Vimeo content.
Privacy policy	https://vimeo.com/privacy
Host(s)	player.vimeo.com
Cookie name	vuid
Cookie runtime	2 years

Upcoming Events:

SHECURITY Summer School 2026

11.09.2026 - 13.09.2026

SBA @ ScapyCon

15.09.2026 - 16.09.2026

IKT-Sicherheitskonferenz 2026 & Young Researchers’ Day

16.09.2026 - 17.09.2026

ARES 2026

August 31, 2026

The 21th International Conference on Availability, Reliability, and Security (ARES 2026) took center stage in Linköping, Sweden, from August 24 - 27, 2026, offering a platform for experts and enthusiasts to explore the latest developments in the field. The conference was jointly organised by Linköpings universitet (LiU) and SBA Research. Read More

SBA & ISC2 BBQ 2026

August 31, 2026

On a warm summer evening in August, we came together for our annual SBA BBQ. A tradition that brings colleagues, friends, and former team members together in a relaxed and welcoming atmosphere. Read More

New Article in heise iX magazine by key researcher Constanze Roedig

August 14, 2026

Constanze Roedig, key researcher at SBA Research, published an insightful article titled Software Supply Chain: “Bill of Behavior” as a Package Insert for Containers in heise magazine iX. Read More

Andreas Ekelhart visiting researcher @Edith Cowan University

August 5, 2026

Our colleague Andreas Ekelhart, key researcher and Applied Research Lead at SBA Research, spent 3 weeks in July 2026 as a visiting researcher at Edith Cowan University (ECU) in Perth, Australia, hosted by Prof. Helge Janicke and his research group. Read More

Sebastian Schrittwieser in Austrian TV and radio on the recent OpenAI security incident and the AI Act

August 3, 2026

Sebastian Schrittwieser, key researcher at SBA Research and head of the CD-Lab AsTra, was a guest in three ORF broadcasts in late July 2026, on the security incident involving an OpenAI model and the AI Act's new transparency obligations. Read More

New paper accepted @ 35th USENIX Security Symposium

July 31, 2026

New paper “Send and Pretend: Exploiting Transcript Consistency Issues in End-to-End Encrypted Group Chats”, was recently accepted for the 35th USENIX Security Symposium. The paper is a collaboration between SBA, the University of Vienna, and the Interdisciplinary Transformation University Austria (IT:U). It was authored by Gabriel K. Gegenhuber, Moritz Grefner, Maximilian Günther, Matthäus Wininger, David Schmidt, and Aljosha Judmayer. Read More

SBA Security Advisory – DFIR-IRIS Stored XSS (CVE-2026-16969, CVE-2026-18360, CVE-2026-18361)

July 30, 2026

The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (XSS) in the assets (CVE-2026-16969), custom attributes (CVE-2026-18360) and datastore upload (CVE-2026-18361) functions. Read More

SBA Security Advisory – DFIR-IRIS Missing Brute Force Protection (CVE-2026-16971, CVE-2026-18362)

July 30, 2026

The IRIS web application in version 2.4.26 and possibly others does not protect its MFA validation (CVE-2026-16971) and user authentication (CVE-2026-18362) against brute-force attacks. Read More

SBA Security Advisory – DFIR-IRIS Insufficient Logout Implementation (CVE-2026-16970)

July 30, 2026

The IRIS web application in version 2.4.26 and possibly others contains a logout functionality which is ineffective. Stolen session cookies can therefore be misused for a long time. Read More

AI for a sustainable future: SBA Research contributions featured in the latest OCG Journal

July 28, 2026

The latest issue of the OCG Journal 02/26, dedicated to “Sustainability and Computer Science – The Potential of AI for Ecology and Climate,” highlights how digital technologies can contribute to a more sustainable future. Our researchers and experts contributed to this discussion by exploring the opportunities and challenges of artificial intelligence in different domains. Read More

SBA Research is a research center for Information Security
funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.

Upcoming Events:

Recent News:

ARES 2026

SBA & ISC2 BBQ 2026

New Article in heise iX magazine by key researcher Constanze Roedig

Andreas Ekelhart visiting researcher @Edith Cowan University

Sebastian Schrittwieser in Austrian TV and radio on the recent OpenAI security incident and the AI Act

New paper accepted @ 35th USENIX Security Symposium

SBA Security Advisory – DFIR-IRIS Stored XSS (CVE-2026-16969, CVE-2026-18360, CVE-2026-18361)

SBA Security Advisory – DFIR-IRIS Missing Brute Force Protection (CVE-2026-16971, CVE-2026-18362)

SBA Security Advisory – DFIR-IRIS Insufficient Logout Implementation (CVE-2026-16970)

AI for a sustainable future: SBA Research contributions featured in the latest OCG Journal

Upcoming events @ SBA

SBA Research at a glance

Highlights of the past years:

Privacy settings

SBA Research is a research center for Information Security funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.

Upcoming Events:

Recent News:

Highlights of the past years:

SBA Research is a research center for Information Security
funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.