SBA Research is a research center for Information Security funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.
CloudLinux CageFS 7.1.1-1 or below passes the authentication token as a command line argument. In some configurations this allows local users to view the authentication token via the process list and gain code execution as another user. We recommend to update CloudLinux CageFS to version 7.1.2-2 or later. For further details, see the full security advisory. Read More
Sebastian Raubitzek and Kevin Mallinger have been invited for a special research seminar in CGIAR (Consultative Group on International Agricultural Research) about the application of complexity science in Artificial Intelligence. The talk focused on the possibility to enhance AI capacities for sustainability and productivity… Read More
Christopher Kruegel, a longtime collaborator, will chair our Scientific Advisory Board. He has published more than 89 papers at the 4 major security conferences and founded Lastline (later acquired by VMware) by building on the results of Ulrich Bayer‘s… Read More
We are pleased to announce that Maria Christakis joined SBA’s new COMET proposal Next Generation Cybersecurity (SBA-K1 NGC) as member of the scientific and innovation board, Laura Kovacs and Matteo Maffei joined as key researchers. Maria Christakis’s ERC grant focuses on improving software testing,… Read More
Anastasia Pustozerova is researcher at SBA Research and gave an interesting talk on Differential Privacy for Machine Learning. Talk Abstract Machine Learning requires a lot of data to train effective models. Data owners might not be willing to share the data because of its private nature. Differential Privacy can… Read More
In the paper, we explore privacy attacks via linkage of samples of human microbiome, and extend on the current threat landscape by a more effective linkage attack. We further discuss mitigation actions. Our paper was published in “Computers & Security“, a Q1 ranked journal by… Read More
MOKOSmart MKGW1 Gateway devices with firmware version 1.1.1 do not provide an adequate session management for the administrative web interface. This allows adjacent attackers with access to the management network to read and modify the configuration of the device. Read More
Be part of the Quantum Revolution! AIT Austrian Institute of Technology invites you to the first National Quantum Communication and Information (QCI) Day. Join them at the House of Industry (Industriellenvereinigung) in Vienna. From January 24-26, 2024, at the Federation of Austrian Industry, Vienna. Dive… Read More
On November 30, Tomasz Miksa presented a compelling talk with the title “More Automation, More Machine-Actionability: Less Bureaucracy,” at the Bio-IT World Europe Conference & Expo. Focusing on the escalating need for computing power in life sciences, Miksa highlighted the challenges of… Read More
Matthias Eckhart is one of the winners of the 2023 ESA Technology Transfer Competition, jointly organized by the European Space Agency and Brimatech Services GmbH. His technology transfer idea “AI-Enhanced Security-Aware Engineering for Automotive Cyber-Physical Systems” leverages synergies between machine learning-based… Read More
A new paper, “Systematization of Knowledge: The Design Space of Digital Payment Systems with Potential for CBD,” led by first author Judith Senn, research assistant at the University of Innsbruck, and co-authored by Aljosha Judmayer, researcher at the University of Vienna, Nicholas Stifter, researcher at SBA Research, ... ∞
Last week, our annual event for partners and friends of SBA Research, IMPACT, brought together experts, practitioners, and decision-makers from research, industry, and the open-source community. The afternoon provided an opportunity to discuss the latest developments in security, AI, and innovation, celebrate our long-standing relationships, and mark 20 years of SBA Research’s contributions to cutting-edge cybersecurity and trustworthy digital innovation. ∞
A group of dedicated young researchers presented their work at the 22st ICT Security Conference on 16 and 17 September 2026, which was organized by the Austrian Armed Forces. ∞