SBA Research is a research center for Information Security funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.
On December 13th, SBA Research employees gathered at the Kardinal König Haus in Vienna for a one-day strategy seminar. The event began with an overview from our management team, reflecting on SBA Research’s journey and highlighting the center’s evolution over time. Presentations from all research groups,… Read More
On November 20, Caroline Lawitschka took the stage at the “Vormittagsprogramm zur Eröffnung des NCC-AT” as part of the Women4Cyber initiative. Her talk, titled “LLM Prompt Injections Attacks and Mitigation Strategies,” addressed critical cybersecurity issues. The event, serving as the opening… Read More
On the 20th of September, Caroline Lawitschka was allowed to be a part of the 10th Tems Security Webinar and gave a talk on the topic “Prompt Injections – Attacks and Mitigation Strategies”. The Tems Security Webinar was the tenth event in this year’s series and took… Read More
On the 22nd of June, the VIP Security Round Table by Tems Security was held as an internal event for employees as well as partners and concerned itself with current as well as future topics in security. Caroline Lawitschka was the second of two talks, the first one… Read More
Together with sipgate and ISMK Stralsund, Gabriel Gegenhuber, researcher at SBA Research and University of Vienna, and Michael Pucher, researcher at SBA research, discovered and investigated a vulnerability in the Voice of LTE (VoLTE) stack that is broadly used within MediaTek-based smartphones. ∞
In the Mediatek modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. ∞