SBA Research is a research center for Information Security funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.
Our colleague Georg Merzdovnik, senior researcher and team lead of research group ISIS at SBA Research, hosted Hacker Jeopardy at Disobey 2026, one of Europe’s most well-known hacker and cybersecurity community events. ... Read More
We are incredibly proud of the Austrian hacking team KuK Hofhackerei, which secured 9th place at DEF CON CTF 33, one of the toughest and most renowned Capture the Flag competitions in the world. The DEF CON Capture the Flag competition is… Read More
We're excited to announce that Michael Pucher, a researcher at SBA Research, delivered a compelling talk titled "Here Be Dragons: Ghidra Decompiler API Adventures" at this year's BalCCon. Read More
On June 14, 2024, Matthias Eckhart attended the DCNA Young Scientists Networking Event and pitched his research on “Security-by-Design for Industrial Control Systems (ICSs).” The event was organized by the Disaster Competence Network Austria (DCNA) and hosted by the… Read More
Matthias Eckhart, researcher at SBA Research, has been named one of the CPS Rising Stars for 2024. Targeted at exceptional PhD students and postdoctoral researchers interested in academic careers in Cyber-Physical Systems (CPS), the selected rising stars were invited to participate in… Read More
New paper “Send and Pretend: Exploiting Transcript Consistency Issues in End-to-End Encrypted Group Chats”, was recently accepted for the 35th USENIX Security Symposium. The paper is a collaboration between SBA, the University of Vienna, and the Interdisciplinary Transformation University Austria (IT:U). It was authored by Gabriel K. Gegenhuber, Moritz Grefner, Maximilian Günther, Matthäus Wininger, David Schmidt, and Aljosha Judmayer. ∞
The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (XSS) in the assets (CVE-2026-16969), custom attributes (CVE-2026-18360) and datastore upload (CVE-2026-18361) functions. ∞
We are proud to celebrate the outstanding achievements of our researchers, who were recognized at the University of Vienna Faculty of Computer Science's Best-of-the-Best Awards on June 24. ∞