International Workshop on Dynamics of Disasters: Hybrid Threats (DoD 2024) – A Recap

August 16, 2024

The International Workshop on Dynamics of Disasters: Hybrid Threats (DoD 2024) took place from July 30 to August 1, 2024, in Vienna, Austria, alongside the 19th International Conference on Availability, Reliability, and Security (ARES 2024). Hosted by the University of Vienna’s Faculty of Computer Science, this event brought together leading… Read More

International Workshop on Dynamics of Disasters: Hybrid Threats (DoD 2024) – A Recap

Reinhard Kugler @Troopers 2024

August 13, 2024

The annual international IT security event, Troopers 2024, recently marked its 15th anniversary in the historic city of Heidelberg. This milestone event took place from the 24th until the 28th of June, bringing together security experts, researchers, and enthusiasts from around the globe to share cutting-edge developments in the field… Read More

Austrian Security Researchers Uncover Multiple Critical Vulnerabilities in VoWiFi – Affecting Austrian Mobile Operator!

July 31, 2024

Significant global security vulnerabilities and the possibility of eavesdropping in Voice over WiFi (VoWiFi) – one of the prevailing communication protocols in the mobile sector – have been exposed by security researchers from SBA Research, the University of Vienna, and the CISPA Helmholtz Center for Information Security in Saarbrücken. VoWiFi… Read More

SBA Security Advisory – Mediatek Modem – Selection of less-secure algorithm during negotiation ‘algorithm downgrade’ (CVE-2024-20069)

July 31, 2024

Vulnerability Overview In the modem, the client can be forced into accepting a less secure key exchange algorithm during the VoWiFi IKE handshake due to a missing downgrade check on the proposed Diffie-Hellman (DH) group. This could lead to remote information disclosure with no additional execution privileges needed. User interaction… Read More

SBA Security Advisory – Mediatek Modem – Selection of less-secure algorithm during negotiation ‘algorithm downgrade’ (CVE-2024-20069)

SBA Security Advisory – ZTE ZXUN-ePDG – Use of non-unique cryptographic keys under default configuration (CVE-2024-22064)

July 31, 2024

Vulnerability Overview ZTE ZXUN-ePDG product, which serves as the network node of the VoWiFi system, under by default configuration, uses a set of non-unique cryptographic keys during establishing a secure connection (IKE) with the mobile devices connecting over the internet. If the set of keys are leaked or cracked, the… Read More

SBA Security Advisory – ZTE ZXUN-ePDG – Use of non-unique cryptographic keys under default configuration (CVE-2024-22064)

SBA Security Advisory – Craft CMS – TOTP Token Stays Valid After Use (CVE-2024-41800)

July 26, 2024

The Craft CMS from version 5.0.0-beta.1 through 5.2.2 allows reuse of TOTP tokens multiple times within the validity period. ... Read More

SBA Security Advisory – Craft CMS – TOTP Token Stays Valid After Use (CVE-2024-41800)

IEEE Euro S&P 2024: A Resounding Success in Vienna!

July 25, 2024

We are thrilled to announce the successful conclusion of IEEE Euro S&P 2024, held in the city of Vienna! This year’s conference brought together more than 300 leading experts, researchers, and practitioners from 32 countries in the field of cybersecurity, offering an unparalleled platform for knowledge exchange and collaboration. Read More

IEEE Euro S&P 2024: A Resounding Success in Vienna!

Great success for the 1st sec4dev Dialogues!

July 15, 2024

We would like to thank all participants, sponsors, and speakers for their active participation and exchange at this year's sec4dev Dialogues! Under the motto "Security for Software Developers" there were six exciting talks on: Read More

SBA Research Receives Funding as a COMET Center for Next Generation Cybersecurity

July 4, 2024

We are proud to announce that SBA Research will once again be funded as one of six COMET Centers by the Austrian Research Promotion Agency (FFG), starting in 2025. This marks the third funding period since its establishment as a K-Ind (industrial competence center)… Read More

SBA Research Receives Funding as a COMET Center for Next Generation Cybersecurity

SBA @ TMA Conference 2024

July 1, 2024

Philipp Frenzel, Gabriel Gegenhuber, Florian Holzbauer, Markus Maier and Jakob Rosenblattl – all researchers from the ERIS research group – attended this year`s TMA PhD School and Conference in Dresden. Read More

Name	SBA Research Cookie
Provider	SBA Research
Purpose	Saves the settings of the visitors selected in the cookie box.
Cookie name	sba-research-cookie
Cookie runtime	1 year

Name	YouTube
Provider	YouTube
Purpose	Used to unblock YouTube content.
Privacy policy	https://policies.google.com/privacy
Host(s)	google.com
Cookie name	NID
Cookie runtime	6 months

Name	Vimeo
Provider	Vimeo
Purpose	Used to unblock Vimeo content.
Privacy policy	https://vimeo.com/privacy
Host(s)	player.vimeo.com
Cookie name	vuid
Cookie runtime	2 years

SBA Research is a research center for Information Security
funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.

Upcoming Events:

Recent News:

International Workshop on Dynamics of Disasters: Hybrid Threats (DoD 2024) – A Recap

Reinhard Kugler @Troopers 2024

Austrian Security Researchers Uncover Multiple Critical Vulnerabilities in VoWiFi – Affecting Austrian Mobile Operator!

SBA Security Advisory – Mediatek Modem – Selection of less-secure algorithm during negotiation ‘algorithm downgrade’ (CVE-2024-20069)

SBA Security Advisory – ZTE ZXUN-ePDG – Use of non-unique cryptographic keys under default configuration (CVE-2024-22064)

SBA Security Advisory – Craft CMS – TOTP Token Stays Valid After Use (CVE-2024-41800)

IEEE Euro S&P 2024: A Resounding Success in Vienna!

Great success for the 1st sec4dev Dialogues!

SBA Research Receives Funding as a COMET Center for Next Generation Cybersecurity

SBA @ TMA Conference 2024

SBA Newsletter

Upcoming events @ SBA

SBA Research at a glance

Highlights of the past years:

SBA Research is a research center for Information Security funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.

Upcoming Events:

Recent News:

SBA Newsletter

Highlights of the past years:

Privacy settings

SBA Research is a research center for Information Security
funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.