Name	SBA Research Cookie
Provider	SBA Research
Purpose	Saves the settings of the visitors selected in the cookie box.
Cookie name	sba-research-cookie
Cookie runtime	1 year

Name	YouTube
Provider	YouTube
Purpose	Used to unblock YouTube content.
Privacy policy	https://policies.google.com/privacy
Host(s)	google.com
Cookie name	NID
Cookie runtime	6 months

Name	Vimeo
Provider	Vimeo
Purpose	Used to unblock Vimeo content.
Privacy policy	https://vimeo.com/privacy
Host(s)	player.vimeo.com
Cookie name	vuid
Cookie runtime	2 years

Upcoming Events:

OWASP Chapter Vienna Meetup x SBA Security Meetup

28.01.2026

Kubernetes Attack and Defense Wizardry with Stormcenter

03.03.2026 - 06.03.2026

OWASP Chapter Vienna Meetup x SBA Security Meetup

31.03.2026

Another Step towards Secure Production – SBA contributes to Establishment of Cyber Security Guideline for Austrian Industry 4.0 Production Plants

September 26, 2019

The cyber security guideline for production plants was established by members of the platform industry 4.0 expert group “Security and safety”. We are content to have had the opportunity to provide expertise from a security research point of view.

SBA Security Advisory – Easy FancyBox WordPress Plugin – Stored Cross-site Scripting (XSS) (CVE-2019-16524)

September 25, 2019

The Easy FancyBox WordPress Plugin Version 1.8.17 is susceptible to Stored Cross-site Scripting in the Settings > Media admin page /wp-admin/options-media.php due to improper encoding of arbitrarily submitted setting parameters. The vulnerability affects every publicly accessible page of the WordPress site. We recommend to update Easy FancyBox WordPress Plugin to version 1.8.18 or later. For further details, see the full security advisory. Read More

Philipp Reisinger @ Klub Logischer Denker

September 23, 2019

Philipp Reisinger gives a talk on the mitigation of cyber security risks in a connected world at the “logical thinkers club” on September 25, 2019. Logical Thinkers Club

Young computer scientists participated in “Ethical Hacking-Bootcamp” at St. Pölten University of Applied Sciences

September 23, 2019

20 hand picked computer science students joined the “Ethical Hacking-Boot-camp” hosted by the St. Pölten University of Applied Sciences from September 4-6, 2019. The workshop was organized by the IT Security Hub Austria, SBA Research and the St. Pölten University of Applied Sciences, represented among others by Mr. FH-Prof. Univ.-Doz. Read More

1st International Summer School on Security & Privacy for Blockchains and Distributed Ledger Technologies Closes Strong

September 20, 2019

As an educational outreach event organized by TU Wien, Princeton University, and SBA Research, the 1st International Summer School on Security & Privacy for Blockchains and Distributed Ledger Technologies took place between September 2-5, 2019. Held in Vienna, Austria in its first year, it was organized as a mix of… Read More

Edgar Weippl at puls4, live interview on “hacking”!

September 12, 2019

SBA Research & Technische Universität Wien Watch the video here!… Read More

ARES & CD-MAKE 2019

September 10, 2019

This year´s ARES & CD-MAKE conference took place at the University of Kent in Canterbury, UK from August 26-29, 2019. On campus accommodation provided a great possibility for 230 participants from 33 countries to discuss the various aspects of security from early morning until late evening. For the third year… Read More

Prof. Ilias S. Kotsireas visits MatRIS research group, Sep 2 – 6, 2019

September 10, 2019

Prof. Ilias S. Kotsireas from Wilfrid Laurier University in Waterloo, Canada, visited MatRIS research group for exploration of new scientific ideas in the field of applied combinatorial mathematics, strengthening the collaboration which recently resulted in the joint publication of a paper to the… Read More

ÖVP-Hack – SBA Research as one of three Experts

September 6, 2019

1,300 gigabytes of data were stolen from the ÖVP server. SBA Research as one of three Experts explain how the attack took place and how you can protect yourself. But keep in mind: “There are technical ways to minimize the scale of such attacks, but there is no one hundred… Read More

SBA Security Advisory – Ping Identity Agentless Integration Kit – Reflected Cross-site Scripting (XSS) (CVE-2019-13564)

September 6, 2019

Ping Identity Agentless Integration Kit before 1.5 is susceptible to Reflected Cross-site Scripting at the /as/authorization.oauth2 endpoint due to improper encoding of an arbitrarily submitted HTTP GET parameter name. We recommend to update Ping Identity Agentless Integration Kit to version 1.5 or later. For further details, see the full security advisory. Read More

SBA Research is a research center for Information Security
funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.

Upcoming Events:

Recent News:

Another Step towards Secure Production – SBA contributes to Establishment of Cyber Security Guideline for Austrian Industry 4.0 Production Plants

SBA Security Advisory – Easy FancyBox WordPress Plugin – Stored Cross-site Scripting (XSS) (CVE-2019-16524)

Philipp Reisinger @ Klub Logischer Denker

Young computer scientists participated in “Ethical Hacking-Bootcamp” at St. Pölten University of Applied Sciences

1st International Summer School on Security & Privacy for Blockchains and Distributed Ledger Technologies Closes Strong

Edgar Weippl at puls4, live interview on “hacking”!

ARES & CD-MAKE 2019

Prof. Ilias S. Kotsireas visits MatRIS research group, Sep 2 – 6, 2019

ÖVP-Hack – SBA Research as one of three Experts

SBA Security Advisory – Ping Identity Agentless Integration Kit – Reflected Cross-site Scripting (XSS) (CVE-2019-13564)

Upcoming events @ SBA

SBA Research at a glance

Highlights of the past years:

Privacy settings

SBA Research is a research center for Information Security funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.

Upcoming Events:

Recent News:

Highlights of the past years:

SBA Research is a research center for Information Security
funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.