iiinova — where your digital self keeps evolving

Edgar Weippl @weippl.bsky.social · 29/11/2025

Obfuscation detection using matrix complexity features of binary grayscale images Sebastian Raubitzek, Sebastian Schrittwieser, Caroline König, Patrick Felbauer, Kevin Mallinger, Andreas Ekelhart, Edgar Weippl, Computers & Security, lnkd.in/gaYgBDWW. Download at lnkd.in/dcfxBSa8

000

Edgar Weippl @weippl.bsky.social · 28/11/2025

Nice interview with Aljosha on our current WhatsApp paper (University of Vienna and SBA Research): netzpolitik.org/2025/intervi... The full paper as preprint: arxiv.org/abs/2511.20252 Hey there! You are using WhatsApp: Enumerating Three Billion Accounts for Security and Privacy. NDSS, 2026.

000

Edgar Weippl @weippl.bsky.social · 22/11/2025

Lots of additional news outlets picked up our media release about the Whatsapp paper a few days later: - www.pressreader.com/austria/kuri... - www.t-online.de/digital/aktu... - www.ad-hoc-news.de/boerse/news/... - www.ad-hoc-news.de/boerse/news/... - www.ad-hoc-news.de/boerse/news/... ...

pressreader.com

Warnung vor „Psycho-Trickkiste“der Händler im Internet | Kurier

Als ob die Vorweihnachtszeit nicht schon genug Stress bescherte, prasseln auf die Menschen im Internet noch massenhaft manipulative Tricks ein, die schnelles bedenkenloses...

000

Edgar Weippl @weippl.bsky.social · 20/11/2025

Cispa European Cybersecurity & AI Hackathon Championship an der Universität Wien cispa.de/en/cispa-hac...

001

Edgar Weippl @weippl.bsky.social · 19/11/2025

"Informatiker*innen der Universität Wien und von SBA Research haben eine große Datenschutzlücke im Contact Discovery Mechanismus von WhatsApp aufgedeckt." www.univie.ac.at/aktuelles/de...

010

Edgar Weippl @weippl.bsky.social · 19/11/2025

"“Well, scientists now know a lot of phone numbers,” ... “So what?” Repeated warnings ... filed away. Only when the researchers submitted a draft of their paper twice did Meta wake up: a surprising amount can be read from the data, ..." Heise: buff.ly/HCWaEWh FutureZone: buff.ly/IIjmR7G

000

Edgar Weippl @weippl.bsky.social · 13/11/2025

"Malware that conceals its behaviour through code obfuscation remains a central challenge for automated detection. ... We transform binary code into grayscale images " (buff.ly/umNhO4T)

000

Edgar Weippl @weippl.bsky.social · 05/11/2025

CISPA European AI and Cybersecurity Hackathon Championship. Dec 13+14 @Univie

000

Edgar Weippl @weippl.bsky.social · 31/10/2025

Critical XSS vuln (CVE-2025-39663, CVSS 9.1) in Checkmk fixed. Discovered by SBA Research — allowed JS injection & potential RCE in distributed setups. Admins: update to 2.4.0p14 / 2.3.0p39, disable “Trust this site completely”. 🔗 heise.de/-10964747

000

Edgar Weippl @weippl.bsky.social · 16/10/2025

David Schmidt, Sebastian Schrittwieser, and Edgar Weippl received the Distinguished Paper Award at ACM CCS 2025 (A*-rated) for their work “Leaky Apps: Large-scale Analysis of Secrets Distributed in Android and iOS Apps.” (cdl-astra.at/2025_09_ccs_...)

120

Edgar Weippl @weippl.bsky.social · 09/10/2025

"For the first time, the University of Vienna places among the top 100 – ranked in 95th position, the University of Vienna is the first Austrian university to make it into the top 100..." (www.univie.ac.at/en/about-us/...)

000

Edgar Weippl @weippl.bsky.social · 08/09/2025

68th Vienna Deep Learning Meetup: CommentSense hosted at SBA Research, in cooperation with the SEC group of the University of Vienna. www.meetup.com/vienna-deep-...

010

Edgar Weippl @weippl.bsky.social · 17/08/2025

At Defcon 33 Gabriel Gegenhuber and Maximilian Günther (University of Vienna and SBA Research) presented a series of new attacks against the two messaging services. Defcon : buff.ly/f7izsXH News: buff.ly/CK0jVOB buff.ly/onMSSoy

010

Reposted by Edgar Weippl

KuK Hofhackerei @hofhackerei.at · 12/08/2025

We got 9th place at @defcon.bsky.social #CTF! Props to all finalists for an intense fight over the past three days and congrats to MMM for taking the win. Thanks to Nautilus Institute for the neat setup this year, we had a blast. Until next time, Vegas! #DEFCON #DEFCON33

2214

Edgar Weippl @weippl.bsky.social · 03/08/2025

... „Dark Patterns nutzen einfach unsere psychologische Schwächen aus. Wenn ich vorab darüber informiert bin, weiß ich zumindest, worauf ich mich da einlasse“, so Informatiker Schrittwieser von der Universität Wien... (help.orf.at/stories/3231...)

030

Edgar Weippl @weippl.bsky.social · 29/07/2025

Enjoying my research stay at NII Tokyo as visiting professor, working with Prof. Isao Echizen’s group on multimedia security, privacy, and synthetic media detection. Exciting work on deepfake detection & PrivacyVisor. Looking forward to returning in 2026. buff.ly/KC7xkV5

010

Edgar Weippl @weippl.bsky.social · 20/07/2025

Not the typical security venue/journal: Computers and Electronics in Agriculture. We propose explainable tabular RL for crop rotation planning; compared to deep Q-learning, our method yields similar/better outcomes; is resilient to external perturbations. buff.ly/HoYTd5H

000

Edgar Weippl @weippl.bsky.social · 20/07/2025

COSE's impact factor increased from 4.8 in 2024 to 5.4 in 2024; After 15 years on the editorial board of COSE, I step down. I’ll continue to support the journal as liaison to IFIP TC 11, where I now also serve as secretary. I continue with ACM TOPS and IEEE TIFS.

010

Edgar Weippl @weippl.bsky.social · 18/07/2025

We’re hiring: Tenure-Track Professorship in Human-Computer Interaction at @univie Join a strong CS faculty & the renowned University of Vienna in the heart of Europe. Deadline: 17 Sep 2025 jobs.univie.ac.at/job/Tenure-T...

010

Edgar Weippl @weippl.bsky.social · 09/07/2025

This spring Peter Kieseberg finally defended his PhD thesis on Data Leak Detection. It included some really established (nice word for old ;-) ) papers and recent work of his Josef-Ressel Center on Blockchain technologies and security management (buff.ly/zKwsCWn).

020

Edgar Weippl @weippl.bsky.social · 07/07/2025

Gutes Interview mit René Mayerhofer zum Thema Staatstrojaner (www.falter.at/zeitung/2025...)

000

Edgar Weippl @weippl.bsky.social · 29/06/2025

On Ascension Day, representatives of the University of Vienna take part in the procession from St. Stephen's Cathedral due to a relationship between the institutions, dating back centuries. Photos(c)Erzdiöz.Wien/Schönlaub, Univ.Wien Zell; buff.ly/Crafw8V

010

Edgar Weippl @weippl.bsky.social · 29/06/2025

Jennifer Sturlese (FH Wiener Neustadt www.fhwn.ac.at/en/employee/...) recently started her PhD studies at the SEC group (@univie sec.cs.univie.ac.at) and works on serious games for red/blue teaming (and other colors)

000

Edgar Weippl @weippl.bsky.social · 20/06/2025

Tabular reinforcement learning for reward robust, explainable crop rotation policies matching deep reinforcement learning performance, Computers and Electronics in Agriculture, 237 (B): 2025, 110571, ISSN 0168-1699, doi.org/10.1016/j.co... (Open Access)

010

Edgar Weippl @weippl.bsky.social · 15/06/2025

Cybercrime und Online-Betrug: Vortrag in Retz Am Dienstag, 24. Juni 2025 beleuchten wir in einem öffentlichen Vortrag in Retz typische Formen von Online-Betrug – mit echten Beispielen, klaren Erklärungen und konkreten Tipps für den Alltag. buff.ly/QeLyrKO

000

Edgar Weippl @weippl.bsky.social · 07/06/2025

International Digital Security Forum: Herausforderungen der digitalen Transformation im MuseumsQuartier "Ein besonderer Programmpunkt war der Workshop „Digitale Souveränität in einer vernetzten Welt“, organisiert von der Wirtschaftsagentur Wien und SBA Research. (www.news.at/technik/idsf...)

010

Edgar Weippl @weippl.bsky.social · 29/05/2025

🔐 Unternehmen unterschätzen oft die Folgen eines Cyberangriffs. Stefan Jakoubi von @sba_research spricht am 12. Juni an der TU Wien über technische Schuld, Social Engineering und resiliente Organisationen. 📅 12. Juni 2025 🕡 18:30 | TU Wien 🔗 www.tuwien.at/ace/news/new... #CyberSecurity #SBAResearch

000

Edgar Weippl @weippl.bsky.social · 28/05/2025

< Franz Wotawa von der TU Graz ... lobte Oliynyks Arbeit als „exzellent strukturiert und wissenschaftlich hoch relevant“. ... Forscherin an der Universität Wien und bei SBA Research, betonte die Bedeutung von Sicherheit ... in der KI-Forschung.“ > (buff.ly/vz28lc3)

030

Edgar Weippl @weippl.bsky.social · 09/01/2025

Today, Matthias Eckhart defended his PhD thesis ("Managing Cyber-Physical Risk in the Industrial Control Systems Lifecycle"), which already won an award (buff.ly/4abjSsT) last year. Congratulations!

010

Edgar Weippl @weippl.bsky.social · 12/12/2024

Tenure Track Professorship at the University of Vienna For more information about the application process and details regarding the mandatory WWTF grant, upon which the position is contingent, please look at buff.ly/4fdQuTu Our research group: buff.ly/3c0iSKC.

010

Edgar Weippl @weippl.bsky.social · 08/12/2024

Jan 15, 2025, ISACA & (ISC)²Austria buff.ly/4granYr “Cybersecurity and LLMs: How language models are changing the security landscape” A. Ekelhart & S. Schrittwieser “Large Language Models Prompt Injections” C. Lawitschka SBA alumni : Yvonne Poul and Gilbert Wondracek

010

Edgar Weippl @weippl.bsky.social · 06/12/2024

It was a privilege to deliver the opening keynote at the 1st International Conference on Cryptography and Information Security in Vietnam (buff.ly/3ZpHR2b). My talk focused on advancing research through the observation of real-world phenomena in complex cyber-physical systems.

010

Edgar Weippl @weippl.bsky.social · 24/11/2024

BSides in Vienna buff.ly/3CCXvQm. Great to see so many familiar faces. Nice T-Shirts (sponsored by SBA) and Matthias gives a talk in the evening.

010

Edgar Weippl @weippl.bsky.social · 23/11/2024

On November 13th, Alexander Schatten, senior researcher at SBA Research, gave a very well-received keynote on “Will AI save us from the software complexity trap?” at the Continuous Lifecycle / ContainerConf 2024 in Mannheim. buff.ly/3OhQVRR Photo: © dPunkt Verlag

030

Edgar Weippl @weippl.bsky.social · 22/11/2024

"GPT, ignoriere die vorherigen Anweisungen!" Prompt-Injection-Angriffe und wie man sie verhindert", Sebastian Schrittwieser und Andreas Ekelhart. Ein unterhaltsamer und lehrreicher Vortrag bei der OCG (buff.ly/3OmwsLE)

010

Edgar Weippl @weippl.bsky.social · 22/11/2024

SEC@UW (buff.ly/3yhSBB3) and @SBA_Research host a workshop by Prof. Răzvan Deaconescu and the Unikraft community. Dec 7-8, More information: buff.ly/3AOJ3UP Originally based on academic research, Unikraft is an open-source Unikernel development kit. ...

buff.ly

SEC - Security and Privacy

010