Edgar Weippl

"WhatsApp gilt als sicherer Messenger – doch Sicherheit endet nicht bei der Verschlüsselung. Neue Forschung zeigt, wie viel sich allein aus der technischen Nutzung und den Profileinstellungen ableiten lässt. " (buff.ly/aDHSt4A und das Paper buff.ly/IwuiwsM

Nice interview with Aljosha on our current WhatsApp paper (University of Vienna and SBA Research): buff.ly/xij76Pr Preprint: buff.ly/8hE1mrC Hey there! You are using WhatsApp: Enumerating Three Billion Accounts for Security and Privacy. NDSS, 2026.

Cispa European Cybersecurity & AI Hackathon Championship an der Universität Wien buff.ly/GRp5H6l

"Informatiker*innen der Universität Wien und von SBA Research haben eine große Datenschutzlücke im Contact Discovery Mechanismus von WhatsApp aufgedeckt." buff.ly/5Js9uVe

"“Well, scientists now know a lot of phone numbers,” ... Repeated warnings ... filed away. the researchers submitted a draft of their paper twice did Meta wake up... Heise: buff.ly/HCWaEWh Future Zone : buff.ly/IIjmR7G

"Malware that conceals its behaviour through code obfuscation remains a central challenge for automated detection. ... We transform binary code into grayscale images " (buff.ly/umNhO4T)

CISPA European AI and Cybersecurity Hackathon Championship. Dec 13+14 @Univie

Critical XSS vuln (CVE-2025-39663, CVSS 9.1) in Checkmk fixed. Discovered by SBA Research — allowed JS injection & potential RCE in distributed setups. Admins: update to 2.4.0p14 / 2.3.0p39, disable “Trust this site completely”. 🔗 heise.de/-10964747

David Schmidt, Sebastian Schrittwieser, and Edgar Weippl received the Distinguished Paper Award at ACM CCS 2025 (A*-rated) for their work “Leaky Apps: Large-scale Analysis of Secrets Distributed in Android and iOS Apps.” (buff.ly/IcUocYO)

"For the first time, the University of Vienna places among the top 100 – ranked in 95th position, the University of Vienna is the first Austrian university to make it into the top 100..." (buff.ly/nReA1da)

68th Vienna Deep Learning Meetup: CommentSense hosted at SBA Research, in cooperation with the SEC group of the University of Vienna. buff.ly/oqrob6X

At Defcon 33 Gabriel Gegenhuber and Maximilian Günther (University of Vienna and SBA Research) presented a series of new attacks against the two messaging services. Defcon : buff.ly/f7izsXH News: buff.ly/CK0jVOB buff.ly/onMSSoy

We got 9th place at @defcon #CTF! Props to all finalists for an intense fight over the past three days and congrats to @mmm_ctf_team for taking the win. Thanks to @Nautilus_CTF for the neat setup this year, we had a blast. Until next time, Vegas! #DEFCON #DEFCON33

... „Dark Patterns nutzen einfach unsere psychologische Schwächen aus. Wenn ich vorab darüber informiert bin, weiß ich zumindest, worauf ich mich da einlasse“, so Informatiker Schrittwieser von der Universität Wien... (buff.ly/S6qzmcN)

Enjoying my research stay at NII Tokyo as visiting professor, working with Prof. Isao Echizen’s group on multimedia security, privacy, and synthetic media detection. Exciting work on deepfake detection & PrivacyVisor. Looking forward to returning in 2026. buff.ly/KC7xkV5

Not the typical security venue/journal: Computers and Electronics in Agriculture. We propose explainable tabular RL for crop rotation planning; compared to deep Q-learning, our method yields similar/better outcomes; is resilient to external perturbations. buff.ly/HoYTd5H

COSE's impact factor increased from 4.8 in 2024 to 5.4 in 2024; After 15 years on the editorial board of COSE, I step down. I’ll continue to support the journal as liaison to IFIP TC 11, where I now also serve as secretary. I continue with ACM TOPS and IEEE TIFS.

We’re hiring: Tenure-Track Professorship in Human-Computer Interaction at @univie Join a strong CS faculty & the renowned University of Vienna in the heart of Europe. Deadline: 17 Sep 2025 buff.ly/zKKzbyI

This spring Peter Kieseberg finally defended his PhD thesis on Data Leak Detection. It included some really established (nice word for old ;-) ) papers and recent work of his Josef-Ressel Center on Blockchain technologies and security management (buff.ly/zKwsCWn).

Gutes Interview mit René Mayerhofer zum Thema Staatstrojaner (buff.ly/dCpCV0e)