Name	SBA Research Cookie
Provider	SBA Research
Purpose	Saves the settings of the visitors selected in the cookie box.
Cookie name	sba-research-cookie
Cookie runtime	1 year

Name	YouTube
Provider	YouTube
Purpose	Used to unblock YouTube content.
Privacy policy	https://policies.google.com/privacy
Host(s)	google.com
Cookie name	NID
Cookie runtime	6 months

Name	Vimeo
Provider	Vimeo
Purpose	Used to unblock Vimeo content.
Privacy policy	https://vimeo.com/privacy
Host(s)	player.vimeo.com
Cookie name	vuid
Cookie runtime	2 years

Upcoming Events:

ERCIM Spring Meeting

20.05.2026 - 21.05.2026

ISPA Forum 2026: Stephanie Jakoubi to Speak on Digital Sovereignty and Cybersecurity

28.05.2026

First SHECURITY Masterclass is out!

30.05.2026 - 02.06.2026

SBA Security Advisory – DFIR-IRIS Alerts Can be Falsely Attributed to Customers (CVE-2026-42547)

May 19, 2026

Users can create alerts for customers that are not assigned to them. This can be abused to falsely attribute fake alerts to customers. In combination with Cross-Site Scripting, this can also be used to exfiltrate alerts from other customers. Read More

SBA Security Advisory – DFIR-IRIS Cross-Site Request Forgery (CSRF) (CVE-2026-42543)

May 19, 2026

The IRIS web application is vulnerable to a Cross-site request forgery attack, because it uses the HTTP method GET to change state on the server. Read More

SBA Security Advisory – DFIR-IRIS Mass Assignment (CVE-2026-42540)

May 19, 2026

he IRIS web application allows a user to alter values in the database via manipulated API requests. Read More

SBA Security Advisory – DFIR-IRIS Excessive Data Exposure (CVE-2026-42439)

May 19, 2026

The IRIS web application returns sensitive data to the user which are not required for the client’s operation. Read More

SBA Security Advisory – DFIR-IRIS Insecure File Upload (CVE-2026-42538)

May 19, 2026

The IRIS web application does not properly validate uploaded files. It can therefore be misused to host phishing pages, amongst other things. This also creates an instance of a Cross-Site Scripting (XSS) vulnerability. Read More

SBA Security Advisory – DFIR-IRIS Open Redirect (CVE-2026-42329)

May 19, 2026

The IRIS web application contains a weakness where an attacker can misuse it to redirect the user to a malicious website controlled by an attacker. Read More

SBA Research to host ERCIM Spring Meetings 2026

May 7, 2026

This May, SBA Research opens its doors to the European research community. From 20–21 May 2026, we are hosting the ERCIM Spring Meetings at our Vienna offices, welcoming representatives from member institutions across Europe for two days of strategic discussions, board deliberations, and collaborative exchange. It is a moment we have been looking forward to, and one that reflects the strength of the partnerships we have built over the years within ERCIM. Read More

SBA Research to host ERCIM Spring Meetings 2026

SBA @ Security Forum Hagenberg

May 6, 2026

Our colleague Reinhard Kugler gave a talk titled Resistence is futile! How a Linux system is assimilated using eBPF rootkits on May 5, 2026. Read More

New article in IEEE Transactions on Reliability

May 4, 2026

In April, our colleague Anastasia Pustozerova is researcher at SBA Research and has published a journal article titled “Lightweight Techniques for Federated Anomaly Detection in Log Data” in IEEE Transactions on Reliability. Read More

Caroline König @ Lange Nacht der Forschung

April 28, 2026

Our colleague Caroline König, researcher at SBA Research and research assistant at the CD-Lab AsTra took part in the CDG-Science-Slam and presented her research on software protection. Within just a few minutes, she gave attendees an entertaining and accessible look at the challenges of shielding software from analysis and tampering, a topic that has become increasingly critical in today's security landscape. Read More

SBA Research is a research center for Information Security
funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.

Upcoming Events:

Recent News:

SBA Security Advisory – DFIR-IRIS Alerts Can be Falsely Attributed to Customers (CVE-2026-42547)

SBA Security Advisory – DFIR-IRIS Cross-Site Request Forgery (CSRF) (CVE-2026-42543)

SBA Security Advisory – DFIR-IRIS Mass Assignment (CVE-2026-42540)

SBA Security Advisory – DFIR-IRIS Excessive Data Exposure (CVE-2026-42439)

SBA Security Advisory – DFIR-IRIS Insecure File Upload (CVE-2026-42538)

SBA Security Advisory – DFIR-IRIS Open Redirect (CVE-2026-42329)

SBA Research to host ERCIM Spring Meetings 2026

SBA @ Security Forum Hagenberg

New article in IEEE Transactions on Reliability

Caroline König @ Lange Nacht der Forschung

Upcoming events @ SBA

SBA Research at a glance

Highlights of the past years:

Privacy settings

SBA Research is a research center for Information Security funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.

Upcoming Events:

Recent News:

Highlights of the past years:

SBA Research is a research center for Information Security
funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.