Name	SBA Research Cookie
Provider	SBA Research
Purpose	Saves the settings of the visitors selected in the cookie box.
Cookie name	sba-research-cookie
Cookie runtime	1 year

Name	YouTube
Provider	YouTube
Purpose	Used to unblock YouTube content.
Privacy policy	https://policies.google.com/privacy
Host(s)	google.com
Cookie name	NID
Cookie runtime	6 months

Name	Vimeo
Provider	Vimeo
Purpose	Used to unblock Vimeo content.
Privacy policy	https://vimeo.com/privacy
Host(s)	player.vimeo.com
Cookie name	vuid
Cookie runtime	2 years

SBA Security Advisory – Checkmk Agent Privilege Escalation via Insecure Temporary Files (CVE-2025-32919)

October 13, 2025

Vulnerability Overview The `win_license` plugin as included in Checkmk agent for Windows versions before 2.4.0p13, 2.3.0p38 and 2.2.0p46, as well as since version 2.1.0b2 and 2.0.0p28 allows low privileged users to escalate privileges to Local System due to insecure use of a temporary folder. Recommended… Read More

SBA Security Advisory – Checkmk Path Traversal (CVE-2025-39664)

October 13, 2025

Vulnerability Overview Checkmk in versions before 2.4.0p13, 2.3.0p38 and 2.2.0p46, as well as since version 2.1.0b1 is prone to a path traversal vulnerability in the report scheduler. Due to an insufficient validation of a file name input, users can store reports in arbitrary locations on the server. Read More

New Paper in ACM Transactions on the Web

October 11, 2025

Tomasz Miksa, senior researcher at SBA Research and TU Vienna, published a paper in ACM Transactions on the Web titled You Shall Not Pass (Without Consent): Enforcing Data Sovereignty with Solid Pods. ... Read More

New white paper on privacy risks, metrics, and governance in synthetic data

October 10, 2025

As part of an IEEE Industry Connection on Synthetic Data our colleague Rudolf Mayer, senior researcher at SBA Research, co-authored a white paper on privacy risks, metrics, and governance in synthetic data. Read More

Visiting Researcher Strengthens Partnership and Research Focus

October 9, 2025

SBA Research was delighted to welcome Dr. Fatma Nur Esirci Oral as a visiting researcher during September 2025. During her stay, Dr. Esirci Oral delivered valuable seminars for our students and junior researchers and led vital discussions with our institute's members. ... Read More

SBA @ heise devSec()

October 8, 2025

Our colleagues Michael Koppmann, senior information security consultat at SBA Research, and Mathias Tausig, information security consultant at SBA Research Research gave two insightful talks on ... Read More

SBA @ LSZ Cyber Crime Forum Graz

October 7, 2025

Our colleagues Nicolas Petri, Information Security Consultant, and Gerald Sendera, Data Protection Supervisor and Legal Counsel, gave an expert talk on Ich wollte nur Software bauen – und jetzt mach ich CRA-Compliance on September 30 at the LSZ Cyber Crime Forum Graz. ... Read More

SBA @ LSZ Cyber Crime Forum Salzburg

October 3, 2025

Our colleagues Stefan Jakoubi, Director of Professional Services, and Mathias Tausig, Senior Consultant, are giving an expert talk on CRA, ASVS & SAMM – 3 Abkürzungen mit Schlagkraft – MFG on September 18, at the LSZ Cyber Crime Forum Salzburg. ... Read More

New paper in Science Computers and Electronics in Agriculture

October 2, 2025

Our colleagues Georg Goldenits, and Thomas Neubauer published a new paper on Taxonomy of cybersecurity consideration in agriculture. This paper explores the key cybersecurity threats and reliability risks in Agriculture 4.0 by mapping potential faults and pitfalls to emerging digital technologies in farming. It also discusses countermeasures, legal frameworks,… Read More

Successful Kick-off for the 1st Shecurity Summer School in Vienna!

September 29, 2025

From September 19 to 21, around 65 talented and curious women and FINTA* immersed themselves in the exciting world of cybersecurity at the University of Vienna. This continuing education and networking program is unique in Europe and is designed to make it easier to enter and advance in IT security. ... Read More

SBA Research is a research center for Information Security
funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.

Upcoming Events:

Recent News: