Name	SBA Research Cookie
Provider	SBA Research
Purpose	Saves the settings of the visitors selected in the cookie box.
Cookie name	sba-research-cookie
Cookie runtime	1 year

Name	YouTube
Provider	YouTube
Purpose	Used to unblock YouTube content.
Privacy policy	https://policies.google.com/privacy
Host(s)	google.com
Cookie name	NID
Cookie runtime	6 months

Name	Vimeo
Provider	Vimeo
Purpose	Used to unblock Vimeo content.
Privacy policy	https://vimeo.com/privacy
Host(s)	player.vimeo.com
Cookie name	vuid
Cookie runtime	2 years

Sebastian Schrittwieser in Austrian TV and radio on the recent OpenAI security incident and the AI Act

August 3, 2026

Sebastian Schrittwieser, key researcher at SBA Research and head of the CD-Lab AsTra, was a guest in three ORF broadcasts in late July 2026, on the security incident involving an OpenAI model and the AI Act's new transparency obligations. Read More

New paper accepted @ 35th USENIX Security Symposium

July 31, 2026

New paper “Send and Pretend: Exploiting Transcript Consistency Issues in End-to-End Encrypted Group Chats”, was recently accepted for the 35th USENIX Security Symposium. The paper is a collaboration between SBA, the University of Vienna, and the Interdisciplinary Transformation University Austria (IT:U). It was authored by Gabriel K. Gegenhuber, Moritz Grefner, Maximilian Günther, Matthäus Wininger, David Schmidt, and Aljosha Judmayer. Read More

SBA Security Advisory – DFIR-IRIS Stored XSS (CVE-2026-16969, CVE-2026-18360, CVE-2026-18361)

July 30, 2026

The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (XSS) in the assets (CVE-2026-16969), custom attributes (CVE-2026-18360) and datastore upload (CVE-2026-18361) functions. Read More

SBA Security Advisory – DFIR-IRIS Missing Brute Force Protection (CVE-2026-16971, CVE-2026-18362)

July 30, 2026

The IRIS web application in version 2.4.26 and possibly others does not protect its MFA validation (CVE-2026-16971) and user authentication (CVE-2026-18362) against brute-force attacks. Read More

SBA Security Advisory – DFIR-IRIS Insufficient Logout Implementation (CVE-2026-16970)

July 30, 2026

The IRIS web application in version 2.4.26 and possibly others contains a logout functionality which is ineffective. Stolen session cookies can therefore be misused for a long time. Read More

AI for a sustainable future: SBA Research contributions featured in the latest OCG Journal

July 28, 2026

The latest issue of the OCG Journal 02/26, dedicated to “Sustainability and Computer Science – The Potential of AI for Ecology and Climate,” highlights how digital technologies can contribute to a more sustainable future. Our researchers and experts contributed to this discussion by exploring the opportunities and challenges of artificial intelligence in different domains. Read More

Code. Protect. Empower. Workshop Inspires 47 Female HTL Students to Explore Cybersecurity Careers

July 13, 2026

At the end of June, forty-seven female HTL students from across Austria participated in the two-day Code. Protect. Empower. – Cyber Security for Female Students workshop, gaining practical, hands-on experience in cybersecurity while exploring education and career opportunities in the field. Read More

Walid Fdhila presented research on Trustworthy Decentralized Digital Ecosystems during guest professorship in France

July 7, 2026

Our colleague Walid Fdhila, senior researcher and team lead at SBA Research and senior researcher at the University of Vienna at the Faculty of Computer Science, gave a talk titled Trustworthy Decentralized Digital Ecosystems, during his stay as guest professor at the Faculty of Sciences and Techniques, Université de Tours, France. Read More

Congratulations to our key researcher Maria Christakis on receiving an ERC Proof of Concept Grant!

July 3, 2026

We congratulate our key researcher Maria Christakis, and Head of the Research Unit Software Engineering at TU Wien Informatics, on receiving a prestigious European Research Council (ERC) Proof of Concept Grant for her project CIRCUZZ. Read More

SBA Security Advisory – Genucenter Disclosure of SNMP Credentials (CVE-2026-13211)

July 2, 2026

The genucenter web interface before version 8.0p11 unnecessarily exposes sensitive SNMP authentication and encryption keys in its HTTP responses to users with the “Service” or “Admin” role. This exposure allows potential unauthorized access to network devices. Read More

SBA Research is a research center for Information Security
funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.

News

Sebastian Schrittwieser in Austrian TV and radio on the recent OpenAI security incident and the AI Act

New paper accepted @ 35th USENIX Security Symposium

SBA Security Advisory – DFIR-IRIS Stored XSS (CVE-2026-16969, CVE-2026-18360, CVE-2026-18361)

SBA Security Advisory – DFIR-IRIS Missing Brute Force Protection (CVE-2026-16971, CVE-2026-18362)

SBA Security Advisory – DFIR-IRIS Insufficient Logout Implementation (CVE-2026-16970)

AI for a sustainable future: SBA Research contributions featured in the latest OCG Journal

Code. Protect. Empower. Workshop Inspires 47 Female HTL Students to Explore Cybersecurity Careers

Walid Fdhila presented research on Trustworthy Decentralized Digital Ecosystems during guest professorship in France

Congratulations to our key researcher Maria Christakis on receiving an ERC Proof of Concept Grant!

SBA Security Advisory – Genucenter Disclosure of SNMP Credentials (CVE-2026-13211)

Upcoming events @ SBA

SBA Research at a glance

Highlights of the past years:

Privacy settings

SBA Research is a research center for Information Security funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.

News

Highlights of the past years:

SBA Research is a research center for Information Security
funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.