Name	SBA Research Cookie
Provider	SBA Research
Purpose	Saves the settings of the visitors selected in the cookie box.
Cookie name	sba-research-cookie
Cookie runtime	1 year

Name	YouTube
Provider	YouTube
Purpose	Used to unblock YouTube content.
Privacy policy	https://policies.google.com/privacy
Host(s)	google.com
Cookie name	NID
Cookie runtime	6 months

Name	Vimeo
Provider	Vimeo
Purpose	Used to unblock Vimeo content.
Privacy policy	https://vimeo.com/privacy
Host(s)	player.vimeo.com
Cookie name	vuid
Cookie runtime	2 years

SBA Security Advisory – Filebrowser Sensitive Data Transferred in URL (CVE-2025-52901)

July 24, 2025

Vulnerability Overview URLs that are accessed by a user are commonly logged in many locations, both server- and client-side. It is thus good practice to never transmit any secret information as part of a URL. Filebrowser violates this practice, since access tokens are used as GET parameters. Read More

New Journal Article in MDPI’s Nitrogen

July 16, 2025

Our colleague Sebastian Raubitzek, researcher at SBA Research and a member of the Security and Privacy Research Group at the University of Vienna, has published a journal article titled “Multi-Class Machine Learning to Quantify the Impact of Nitrogen Management Practices on Grassland Biomass” in MDPI’s Journal Nitrogen ... Read More

Young Researchers´ Day @ ICT Security Conference 2025 – Recap

July 2, 2025

A group of dedicated young researchers presented their work at the 21st ICT Security Conference on 25 and 26 June 2025, which was organized by the Austrian Armed Forces. They impressed the audience with their… Read More

Young Researchers´ Day @ ICT Security Conference 2025 – Recap

Detection of Null Pointer Dereference in MediaTek VoLTE Stack Firmware with sipgate and ISMK Stralsund

June 6, 2025

Together with sipgate and ISMK Stralsund, Gabriel Gegenhuber, researcher at SBA Research and University of Vienna, and Michael Pucher, researcher at SBA research, discovered and investigated a vulnerability in the Voice of LTE (VoLTE) stack that is broadly used within MediaTek-based smartphones. Read More

SBA Security Advisory – Null pointer dereference in MediaTek Modem (CVE-2025-20647)

June 6, 2025

In the Mediatek modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Read More

OCG Förderpreis 2025 Awarded to Daryna Oliynyk!

May 23, 2025

In 2025, the Austrian Computer Society (OCG) once again recognizes outstanding academic work in the fields of Computer Science and Business Informatics with the OCG Förderpreis and the OCG Förderpreis-FH. This year’s OCG Förderpreis goes to our research colleague Daryna Oliynyk for… Read More

OCG Förderpreis 2025 Awarded to Daryna Oliynyk!

Combinatorial Security Testing for Bluetooth Low Energy accepted at USENIX ATC

May 8, 2025

Bluetooth Low Energy is one of the most widely used protocols used in Internet of Things (IoT) and multimedia devices. Security issues in these applications are prone to affect a significant number of end users and companies alike. In their latest work applying the Combinatorial Security Testing (CST) approach… Read More

Combinatorial Security Testing for Bluetooth Low Energy accepted at USENIX ATC

Combinatorial Security Testing by MATRIS nominated for Houska prize

April 22, 2025

The research on Combinatorial Security Testing (CST) by the MATRIS group of SBA Research is amongst the top five nominations for the Houska prize, Austria's largest private award for application-oriented research, in the category non-university research. ... Read More

Combinatorial Security Testing by MATRIS nominated for Houska prize

SBA Research Strengthens Security Services with Swift Certified Experts

March 12, 2025

We are proud to announce that we have been awarded the 2025 Swift Provider – Customer Security Programme Assessment label by Swift. This prestigious recognition highlights our commitment to maintaining high cybersecurity standards and excellence in customer security assessments. The label was granted following a rigorous… Read More

SBA Research Strengthens Security Services with Swift Certified Experts

SBA Research Professional Services got re-certified according to ISO 27001:2022

March 11, 2025

We are proud to announce our re-certification according to ISO 27001:2022 at SBA Research Professional Services. Read More

SBA Research is a research center for Information Security
funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.

Year: 2025