SBA Research is a research center for Information Security funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.
In April, our colleague Anastasia Pustozerova is researcher at SBA Research and has published a journal article titled “Lightweight Techniques for Federated Anomaly Detection in Log Data” in IEEE Transactions on Reliability. Read More
Our colleague Caroline König, researcher at SBA Research and research assistant at the CD-Lab AsTra took part in the CDG-Science-Slam and presented her research on software protection. Within just a few minutes, she gave attendees an entertaining and accessible look at the challenges of shielding software from analysis and tampering, a topic that has become increasingly critical in today's security landscape. Read More
GoAnywhere MFT before 7.10.0 is affected by an HTML injection vulnerability in its email templating functionality. If an attacker is able to influence the content of a template variable, malicious HTML can be embedded into outgoing emails generated by the application. As these messages originate from a trusted system, the vulnerability may facilitate phishing and other social-engineering attacks. The issue arises from insufficient HTML encoding of untrusted input before inclusion in HTML email content. Read More
Sebastian Raubitzek, researcher at SBA Research, gave a talk titled “Fraktale Aktivierungsfunktionen in neuronalen Netzen” at the Social Artificial Intelligence Night (SAINT) 2026. Read More
Sebastian Schrittwieser, researcher at SBA Research and the University of Vienna, was recently featured in an article by futurezone.at discussing large-scale cyberattacks targeting internet routers. Read More
SBA Research was pleased to host the first workshop of the year in collaboration with the Austrian Cyber Security Challenge (ACSC). The session took place in a hybrid format, welcoming participants both on-site in Vienna and online via Discord. Read More
We warmly congratulate Edgar Weippl, Scientific Director of SBA Research and Head of the Security and Privacy Research Group at the University of Vienna, on his appointment as Dean of the Faculty of Computer Science. Read More
On March 31, our 2nd OWASP Chapter Vienna Meetup took place, featuring three excellent speaker sharing insights on OT-Security and a bit more. Read More
In March, our colleague Michael Koppmann, senior information security consultant at SBA Research, gave an insightful talk titled Illegal States Are My Favorite Security Vulnerabilities (to Delete at Compile Time) at the BOB 2026 Conference in Berlin, Germany. Read More
We are pleased to announce the publication of Dynamics of Disasters: Hybrid Threats, a new volume in the Springer Optimization and Its Applications series. The book was published in Spring 2026 and is co-edited by Dimitris E. Simos, Panos M. Pardalos, Ilias S. Kotsireas, Bernhard Garn, senior researcher at SBA Research and Postdoctoral Research Fellow at the University of Salzburg and Stefan Wolfgang Pickl. Read More
The 21th International Conference on Availability, Reliability, and Security (ARES 2026) took center stage in Linköping, Sweden, from August 24 - 27, 2026, offering a platform for experts and enthusiasts to explore the latest developments in the field. The conference was jointly organised by Linköpings universitet (LiU) and SBA Research. ∞
New paper “Send and Pretend: Exploiting Transcript Consistency Issues in End-to-End Encrypted Group Chats”, was recently accepted for the 35th USENIX Security Symposium. The paper is a collaboration between SBA, the University of Vienna, and the Interdisciplinary Transformation University Austria (IT:U). It was authored by Gabriel K. Gegenhuber, Moritz Grefner, Maximilian Günther, Matthäus Wininger, David Schmidt, and Aljosha Judmayer. ∞
The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (XSS) in the assets (CVE-2026-16969), custom attributes (CVE-2026-18360) and datastore upload (CVE-2026-18361) functions. ∞