SBA Research is a research center for Information Security funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.
SBA Research has proudly supported BSidesVienna as a Gold Sponsor for several years. We’re committed to fostering independent security research and collaboration within the cybersecurity community, and BSidesVienna is an excellent platform for advancing these goals. Read More
We are proud to celebrate the outstanding achievements of our researchers, who were recognized at the University of Vienna Faculty of Computer Science's Best-of-the-Best Awards on June 24. Read More
How can technology contribute to peace? And what responsibility do today's innovators carry?
Together with the PeaceTech Alliance and AIT Austrian Institute of Technology, SBA Research had the privilege of welcoming Hiroshima survivor and Nobel Peace Prize laureate Setsuko Thurlow to Vienna for the event "Hiroshima's Message for Tech Students and Innovators Today." Read More
On June 23, David Schmidt successfully defended his dissertation, “Hidden Dangers: Uncovering Security and Privacy Risks Through Large-scale Mobile App Analysis,” and received excellent evaluations.
Edgar Weippl, Sebastian Schrittwieser, and Karen Azari supervised the dissertation, while Christopher Kruegel and Thijs van Ede served as reviewer. Read More
On June 19, SBA Research and its partner Condignum hosted the third edition of the sec4dev Dialogues event series.
Security for Software Developers is essential. The current threat landscape and security incidents in recent years make it clear: the topic is more relevant than ever. Read More
We are pleased to share that our colleague Walid Fdhila, senior researcher and team lead at SBA Research and senior researcher at the University of Vienna at the Faculty of Computer Science, will spend the next month as a guest professor at the Faculty of Sciences and Techniques at Université de Tours, France. Read More
Ludwig Kampel attended the Design and Analysis of Experiments Conference (DAE) 2026, which took place from May 19 to 21, 2026, at Rutgers University in Piscataway, New Jersey, USA. Read More
SBA Research recently participated in the latest plenary meeting of the AIAGENT4CYBER project, hosted by ITCL Centro Tecnológico in Burgos, Spain. Read More
Kevin Mallinger, researcher at SBA Research, recently delivered a guest lecture on “Sustainable AI Applications” at Institut Agro Rennes-Angers in France. The lecture brought together students, researchers, and faculty members interested in the role of artificial intelligence in addressing sustainability challenges. Read More
SWUpdate before 2026.05 is affected by a time-of-check time-of-use (TOCTOU) race condition that allows local unprivileged attackers to escalate privileges to root or install untrusted contents using a signed update. Read More
New paper “Send and Pretend: Exploiting Transcript Consistency Issues in End-to-End Encrypted Group Chats”, was recently accepted for the 35th USENIX Security Symposium. The paper is a collaboration between SBA, the University of Vienna, and the Interdisciplinary Transformation University Austria (IT). It was authored by Gabriel K. Gegenhuber, Moritz Grefner, Maximilian Günther, Matthäus Wininger, David Schmidt, and Aljosha Judmayer. ∞
The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (XSS) in the assets (CVE-2026-16969), custom attributes (CVE-2026-18360) and datastore upload (CVE-2026-18361) functions. ∞
We are proud to celebrate the outstanding achievements of our researchers, who were recognized at the University of Vienna Faculty of Computer Science's Best-of-the-Best Awards on June 24. ∞