SBA Research is a research center for Information Security funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.
The IRIS web application does not properly validate uploaded files. It can therefore be misused to host phishing pages, amongst other things. This also creates an instance of a Cross-Site Scripting (XSS) vulnerability. Read More
The IRIS web application contains a weakness where an attacker can misuse it to redirect the user to a malicious website controlled by an attacker. Read More
This May, SBA Research opens its doors to the European research community. From 20–21 May 2026, we are hosting the ERCIM Spring Meetings at our Vienna offices, welcoming representatives from member institutions across Europe for two days of strategic discussions, board deliberations, and collaborative exchange. It is a moment we have been looking forward to, and one that reflects the strength of the partnerships we have built over the years within ERCIM. Read More
In April, our colleague Anastasia Pustozerova is researcher at SBA Research and has published a journal article titled “Lightweight Techniques for Federated Anomaly Detection in Log Data” in IEEE Transactions on Reliability. Read More
Our colleague Caroline König, researcher at SBA Research and research assistant at the CD-Lab AsTra took part in the CDG-Science-Slam and presented her research on software protection. Within just a few minutes, she gave attendees an entertaining and accessible look at the challenges of shielding software from analysis and tampering, a topic that has become increasingly critical in today's security landscape. Read More
GoAnywhere MFT before 7.10.0 is affected by an HTML injection vulnerability in its email templating functionality. If an attacker is able to influence the content of a template variable, malicious HTML can be embedded into outgoing emails generated by the application. As these messages originate from a trusted system, the vulnerability may facilitate phishing and other social-engineering attacks. The issue arises from insufficient HTML encoding of untrusted input before inclusion in HTML email content. Read More
Sebastian Raubitzek, researcher at SBA Research, gave a talk titled “Fraktale Aktivierungsfunktionen in neuronalen Netzen” at the Social Artificial Intelligence Night (SAINT) 2026. Read More
Sebastian Schrittwieser, researcher at SBA Research and the University of Vienna, was recently featured in an article by futurezone.at discussing large-scale cyberattacks targeting internet routers. Read More
SBA Research was pleased to host the first workshop of the year in collaboration with the Austrian Cyber Security Challenge (ACSC). The session took place in a hybrid format, welcoming participants both on-site in Vienna and online via Discord. Read More
SBA Research was delighted to welcome FFG Managing Director Karin Tausz and Head of Division Structural Programmes Silvia Laimgruber to the SBA-K1 NGC COMET Center in Vienna. ... ∞
Our colleague Nicholas Stifter, researcher and security analyst at SBA Research, presented his conference paper titled Reuse of Public Keys Across UTXO and Account-Based Cryptocurrencies at the Financial Cryptography and Data Security 2026 in St. Kitts, USA. ... ∞
Tanja Sarcevic, Daryna Olyinyk, and Yelyzaveta Klysa, all MLDM research group members, and Sabina Khazari participated in the European Cybersecurity & AI Hackathon Championship organized by CISPA, one of Europe’s leading research centers in cybersecurity and artificial intelligence. Congratulations to them, they won 2nd place and qualified themselves to the grand finale that will be held in St. Ingbert, Germany, in June 2026. ... ∞