Name	SBA Research Cookie
Provider	SBA Research
Purpose	Saves the settings of the visitors selected in the cookie box.
Cookie name	sba-research-cookie
Cookie runtime	1 year

Name	YouTube
Provider	YouTube
Purpose	Used to unblock YouTube content.
Privacy policy	https://policies.google.com/privacy
Host(s)	google.com
Cookie name	NID
Cookie runtime	6 months

Name	Vimeo
Provider	Vimeo
Purpose	Used to unblock Vimeo content.
Privacy policy	https://vimeo.com/privacy
Host(s)	player.vimeo.com
Cookie name	vuid
Cookie runtime	2 years

Upcoming Events:

IKT-Sicherheitskonferenz 2026 & Young Researchers’ Day

16.09.2026 - 17.09.2026

14. Cybersecurity-Awareness Stammtisch

29.09.2026

SBA @ Kubernetes Community Days Sofia

29.09.2026

Best paper award @ CAIS 2026

May 28, 2026

Sebastian Schrittwieser, key researcher at SBA Research and head of the CD-Lab AsTra and Johanna Ullrich, key researcher at SBA Research and Professor of Security at IT:U, received the Best Paper Award at the AgentSkills Workshop at the ACM Conference on AI and Agentic Systems (CAIS 2026) in San José for their work Context Matters: Repository-Aware Security Analysis of the Agent Skill Ecosystem. Read More

ERCIM Spring Meeting 2026

May 26, 2026

On 20–21 May 2026, SBA Research had the pleasure of hosting the ERCIM Spring Meeting at our offices in Vienna. Representatives from ERCIM member institutions across Europe came together for two days of exchange, strategic discussions, and collaborative planning focused on the future of European research in informatics and mathematics. Read More

Participants ERCIM Spring Meeting Dinner

SBA @ ESWC 2026

May 22, 2026

Our colleague Andreas Ekelhart, key researcher and Applied Research Lead at SBA Research and researcher at the Research Group Security & Privacy at University of Vienna,, presented his conference paper titled AgentO: An Ontology for Modeling Agentic AI Systems at the 23rd European Semantic Web Conference (ESWC 2026) in Dubrovnik, Croatia. Read More

New article in Communications in Nonlinear Science and Numerical Simulations

May 21, 2026

Our colleague Sebastian Raubitzek, researcher at SBA Research and a member of the Security and Privacy Research Group at the University of Vienna, has published a journal article titled “Fractals in Neural Networks: Introducing a New Class of Activation Functions” in Communications in Nonlinear Science and Numerical Simulations in collaboration with the CD lab AsTra. Read More

SBA Security Advisory – DFIR-IRIS Alerts Can be Falsely Attributed to Customers (CVE-2026-42547)

May 19, 2026

Users can create alerts for customers that are not assigned to them. This can be abused to falsely attribute fake alerts to customers. In combination with Cross-Site Scripting, this can also be used to exfiltrate alerts from other customers. Read More

SBA Security Advisory – DFIR-IRIS Cross-Site Request Forgery (CSRF) (CVE-2026-42543)

May 19, 2026

The IRIS web application is vulnerable to a Cross-site request forgery attack, because it uses the HTTP method GET to change state on the server. Read More

SBA Security Advisory – DFIR-IRIS Mass Assignment (CVE-2026-42540)

May 19, 2026

he IRIS web application allows a user to alter values in the database via manipulated API requests. Read More

SBA Security Advisory – DFIR-IRIS Excessive Data Exposure (CVE-2026-42439)

May 19, 2026

The IRIS web application returns sensitive data to the user which are not required for the client’s operation. Read More

SBA Security Advisory – DFIR-IRIS Insecure File Upload (CVE-2026-42538)

May 19, 2026

The IRIS web application does not properly validate uploaded files. It can therefore be misused to host phishing pages, amongst other things. This also creates an instance of a Cross-Site Scripting (XSS) vulnerability. Read More

SBA Security Advisory – DFIR-IRIS Open Redirect (CVE-2026-42329)

May 19, 2026

The IRIS web application contains a weakness where an attacker can misuse it to redirect the user to a malicious website controlled by an attacker. Read More

SBA Research is a research center for Information Security
funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.

Upcoming Events:

Recent News:

Best paper award @ CAIS 2026

ERCIM Spring Meeting 2026

SBA @ ESWC 2026

New article in Communications in Nonlinear Science and Numerical Simulations

SBA Security Advisory – DFIR-IRIS Alerts Can be Falsely Attributed to Customers (CVE-2026-42547)

SBA Security Advisory – DFIR-IRIS Cross-Site Request Forgery (CSRF) (CVE-2026-42543)

SBA Security Advisory – DFIR-IRIS Mass Assignment (CVE-2026-42540)

SBA Security Advisory – DFIR-IRIS Excessive Data Exposure (CVE-2026-42439)

SBA Security Advisory – DFIR-IRIS Insecure File Upload (CVE-2026-42538)

SBA Security Advisory – DFIR-IRIS Open Redirect (CVE-2026-42329)

Upcoming events @ SBA

SBA Research at a glance

Highlights of the past years:

Privacy settings

SBA Research is a research center for Information Security funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.

Upcoming Events:

Recent News:

Highlights of the past years:

SBA Research is a research center for Information Security
funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.