#cispa — Public Fediverse posts

🏅 Saarbrücken receives 2 #ERC Starting Grants in computer science this year, more than any other institution in Germany!

Congrats to Dr. Mariya Toneva and Dr. Franziska Boenisch!

💶 Each project will receive €1.5M over 5 years.

🔗 Read more here:
➡️ https://sic.link/mariya
➡️ https://sic.link/franziska

#SIC #SaarlandInformaticsCampus #saarlanduniversity #uds #computerscience #ERCGrants #ERCStartingGrants #STEM #researchfunding #womeninstem #artificialintelligence #ai #machinelearning #CISPA #MPISWS

How agile is your crypto? Qualitative interview study by CISPA researchers explores possibilities and challenges of crypto updates! To be presented at the Usenix Security Symposium in Seattle on Aug. 14, 2025. #cispa #crypto #cryptoupdates #cybersecurity
https://nachrichten.idw-online.de/2025/08/11/how-agile-is-your-crypto-interview-study-explores-the-opportunities-and-challenges-of-cryptographic-update-processes

Wie agil ist deine Krypto? Qualitative CISPA-Interviewstudie erhebt Chancen und Herausforderungen von kryptographischen Updates! Präsentation am 14. August 2025 auf dem Usenix Security Symposium in Seattle #cispa #crypto #cryptoupdates #cybersecurity
https://nachrichten.idw-online.de/2025/08/11/wie-agil-ist-deine-krypto-interviewstudie-erhebt-chancen-und-herausforderungen-von-kryptographischen-updateprozessen

🏅 This week, SIC celebrates its 46th #ERC Grant!

Congrats to #CISPA researcher Prof. Dr. Andreas Zeller on receiving an ERC Proof of Concept Grant by the European Research Council!

#LLMs fall short in maintaining existing systems. As a response, his team developed testing methods that explore software behavior systematically.

💶 With the new €150,000 grant, the goal is putting this approach into complex applications and improving software productivity.

🔗 Read more: https://sic.link/ercproofofconcept

Rund 9000 Doktorandinnen und Doktoranden forschen bei der Helmholtz-Gemeinschaft – elf von ihnen wurden in diesem Jahr mit dem #Promotionspreis ausgezeichnet. Nun stellen wir sie Euch vor!

Heute starten wir mit Benedikt Wagner (#CISPA Helmholtz-Zentrum für Informationssicherheit) und seinem Aha-Moment während seiner Doktorarbeit bei #Helmholtz.

Mehr Infos: https://www.helmholtz.de/newsroom/artikel/helmholtz-verleiht-promotionspreis/

For more software security: FANDANGO, a new open-source fuzzer,
uses an evolutionary algorithm to automatically generate high-quality test
inputs that satisfy defined constraints. Available on GitHub and developed by CISPA-researchers! #cispa #fuzzing
https://nachrichten.idw-online.de/2025/06/26/survival-of-the-fuzziest-open-source-fuzzer-uses-evolutionary-algorithm-to-produce-customized-test-inputs

Want security in research? And research in security? Actually, why not have both? "In view of the current geopolitical landscape", #CISPA has opened a new round of faculty positions, including CySec, SE, ML, theory:
https://jobs.cispa.saarland/jobs/detail/tenure-track-faculty-in-all-areas-related-to-information-security-and-artificial-intelligence-f-m-d-extended-call-269

@strawberryfieldsforever FWIW I can give you several reasons to #boycott #Pepsi, who spent $250k on Trump’s inaugeration, sponsored the NFL during #takeAknee, #GMA member who supports #Monsanto & spent almost $9 million to fight #GMO labeling, consumes 450k tons of #palmoil/yr, & supported #CISPA (an anti-privacy bill in the US). I can give a longer list of reasons to boycott Coke… so boycott both.

Outdated code snippets from Stack Overflow jeopardise software security
https://cispa.de/en/jallow-stackoverflow and
https://publications.cispa.saarland/4053/

This could be relevant for #Copilot and all other #codeassistant tools training data.

#security #software #codesnippet #stackoverflow #github #cispa #cispahelmholtzcenterforinformationsecurity

Im globalen Wettlauf um KI-Technologien sind die Spitzenplätze vergeben. Doch mit klugen Strategien könnte Deutschland noch aufholen. Worauf es dabei ankommt, skizziert Michael Backes, CEO des #CISPA Helmholtz-Zentrums für #Informationssicherheit.

Standpunkt im Newsletter lesen: www.helmholtz.de/monthly-aktuell

Newsletter abonnieren: www.helmholtz.de/monthly

First picture of the new #CISPA building! The inner circle alone has a diameter of 100 meters.
https://www.saarbruecker-zeitung.de/saarland/saar-pfalz-kreis/sanktingbert/cispa-neubau-als-topthema-bei-neujahrsempfang-in-st-ingbert_aid-123085571?share=8754c396ebe9e28858edc291f38e8a9e

#CISPA gets a new 350M€ building in St. Ingbert, bringing all its researchers under one roof. There’s space for over 1,000 employees! https://cispa.de/en/new-cispa-building-in-igb

Still shocked and now looking for new opportunities? At #CISPA, we have opened a new call for Tenured Faculty in Information Security, AI, or related areas (such as Software Engineering and Program Analysis), with super-generous funding. Apply now! https://career.cispa.de/tenured-faculty.html

#Journals | #Security&Safety
📢#CallForPapers

Special Issue on “Security and Safety of Data in Cloud Computing” #openaccess
Guest editors from #UniversityofChineseAcademyofSciences #MichiganStateUniversity and #CISPA #CISPAHelmholtzCenterforInformationSecurity

📅 Submission deadline – 30 October 2024
Read More➡️ https://bit.ly/4f8toPv

#AcademicResearch #EDPSciences
#DigitalTransformation
#DataSecurity
@academicchatter
@academicsunite @[email protected] @[email protected] @communicationscholars

🎙️ Understanding #self-hosting and security through 1000 Nextcloud servers

Today's #NextcloudPodcast : Lea Gröber's insights on how the human aspect of your digital infrastructure may be the most important, and yet the least understood.

#usablesecurity #CISPA #dataprivacy

https://nextcloud.com/blog/lea-grober-understanding-self-hosting-and-security-through-nextcloud/

GhostWrite, a new CPU vulnerability, compromises the integrity of T-Head’s “XuanTie C910” RISC-V CPU. Discovered by CISPA researchers, GhostWrite grants unprivileged users read-and-write access to physical memory on the C910 #cpusecurity #cispa
https://nachrichten.idw-online.de/2024/08/07/cpu-security-ghostwrite-vulnerability-breaks-integrity-of-t-head-risc-v-cpu

GhostWrite, a new CPU vulnerability, compromises the integrity of T-Head’s “XuanTie C910” RISC-V CPU. Discovered by CISPA researchers, GhostWrite grants unprivileged users read-and-write access to physical memory on the C910 #cpusecurity #cispa
https://nachrichten.idw-online.de/2024/08/07/cpu-security-ghostwrite-vulnerability-breaks-integrity-of-t-head-risc-v-cpu

#Journals | Security and Safety
#CallForPapers

Special Issue on “Security and Safety of Data in Cloud Computing” #openaccess
Guest editors from #UniversityofChineseAcademyofSciences #MichiganStateUniversity and #CISPA #CISPAHelmholtzCenterforInformationSecurity

📅 Submission deadline – 30 October 2024
Read More➡️ https://sands.edpsciences.org/news/321-security-and-safety-of-data-in-cloud-computing-call-for-papers

#AcademicResearch #EDPSciences
#DigitalTransformation
#DataSecurity

🎙️ Understanding #self-hosting and security through 1000 Nextcloud servers

Today's #NextcloudPodcast : Lea Gröber's insights on how the human aspect of your digital infrastructure may be the most important, and yet the least understood.

#usablesecurity #CISPA #dataprivacy

https://nextcloud.com/blog/lea-grober-understanding-self-hosting-and-security-through-nextcloud/

I am co-founding a new startup! #InputLab creates test data for thousands of formats from electronic invoices to retail orders, covering all input features. We just passed the initial evaluation toward up to 800k€ public funding to start as a #CISPA spin-off in September.

We are #hiring – and we are looking out for #collaboration partners and early #adopters from industry and public service. Check us out at https://inputlab.net! #startup #XML #softwaretesting

🔒 Discover the latest in cybersecurity research. Unveiling a new attack vector exploiting UDP vulnerabilities, our findings highlight the importance of proactive defense measures. Stay ahead of cyber threats with #CybersecurityInsights #CISPA #DataProtection #ThreatDetection #TechResearch 🚀
https://www.relianoid.com/blog/loop-dos-attacks-disrupting-datagram-application-layers/

Here‘s the #CISPA / Andreas Zeller team visiting the ICSE conference in Lisbon - with Laura Plein, Jordan Samhi, Leon Bettscheider, Bernd Gruner, and Rafael Dutra

The Usable #Security Group at #CISPA is looking for committed study participants to support their research. If you’d like to participate, you should be over 18 years old and own an #iPhone. Participation will help to advance #privacy-enhancing technology.

Sign up: https://s.gwdg.de/QxSead

A new Denial-of-Service loop attack targets application-layer protocols that draw on the
User Datagram Protocol for end-to-end communication. An estimated 300,000 Internet hosts and their networks are put at risk. #networksecurity #cispa
https://nachrichten.idw-online.de/2024/03/19/loop-dos-new-denial-of-service-attack-targets-application-layer-protocols

Ein neuer DoS-Angriff gefährdet Internetprotokolle auf der Anwendungsschicht, die zur Datenübertragung auf das User Datagram Protocol zurückgreifen. Schätzungsweise 300.000 Internethosts und deren Netzwerke sind betroffen. #netzwerksicherheit #cispa
https://nachrichten.idw-online.de/2024/03/19/loop-dos-neuer-denial-of-service-angriff-gefaehrdet-protokolle-auf-der-anwendungsschicht

Neue Podcast-Folge mit @AndreasZeller vom #CISPA über das Testen von #Software.

Ganze Sendung und kostenloses #Podcast-Abo: https://resonator-podcast.de/2024/res202-automatisiertes-softwaretesten/ (hk)

"RUB: Satelliten-Sicherheit hinkt Stand der Technik Jahrzehnte hinterher"

"Forschende haben die Software dreier Satelliten untersucht. Und viele gängige Sicherheitsmechanismen vermisst. Eine Presseinformation der Ruhr-Universität Bochum (RUB)."

https://www.raumfahrer.net/rub-satelliten-sicherheit-hinkt-stand-der-technik-jahrzehnte-hinterher/

#Bochum #CISPA #Computer #Cybersecurity #IT #ITSicherheit #Raumfahrt #RUB #Satelliten #Saarbrücken #SecurityByObscurity #Software

11.7.2023

I am co-founding a new startup! #InputLab creates test data for thousands of formats from electronic invoices to retail orders, covering all input features. We just passed the initial evaluation toward up to 800k€ public funding to start as a #CISPA spin-off in September.

We are #hiring – and we are looking out for #collaboration partners and early #adopters from industry and public service. Check us out at https://inputlab.net! #startup #XML #softwaretesting

I am co-founding a new startup! #InputLab creates test data for thousands of formats from electronic invoices to retail orders, covering all input features. We just passed the initial evaluation toward up to 800k€ public funding to start as a #CISPA spin-off in September.

We are #hiring – and we are looking out for #collaboration partners and early #adopters from industry and public service. Check us out at https://inputlab.net! #startup #XML #softwaretesting

I am co-founding a new startup! #InputLab creates test data for thousands of formats from electronic invoices to retail orders, covering all input features. We just passed the initial evaluation toward up to 800k€ public funding to start as a #CISPA spin-off in September.

We are #hiring – and we are looking out for #collaboration partners and early #adopters from industry and public service. Check us out at https://inputlab.net! #startup #XML #softwaretesting

I am co-founding a new startup! #InputLab creates test data for thousands of formats from electronic invoices to retail orders, covering all input features. We just passed the initial evaluation toward up to 800k€ public funding to start as a #CISPA spin-off in September.

We are #hiring – and we are looking out for #collaboration partners and early #adopters from industry and public service. Check us out at https://inputlab.net! #startup #XML #softwaretesting

🎙️ Understanding #self-hosting and security through 1000 Nextcloud servers

Today's #NextcloudPodcast : Lea Gröber's insights on how the human aspect of your digital infrastructure may be the most important, and yet the least understood.

#usablesecurity #CISPA #dataprivacy

https://nextcloud.com/blog/lea-grober-understanding-self-hosting-and-security-through-nextcloud/

🎙️ Understanding #self-hosting and security through 1000 Nextcloud servers

Today's #NextcloudPodcast : Lea Gröber's insights on how the human aspect of your digital infrastructure may be the most important, and yet the least understood.

#usablesecurity #CISPA #dataprivacy

https://nextcloud.com/blog/lea-grober-understanding-self-hosting-and-security-through-nextcloud/

🎙️ Understanding #self-hosting and security through 1000 Nextcloud servers

Today's #NextcloudPodcast : Lea Gröber's insights on how the human aspect of your digital infrastructure may be the most important, and yet the least understood.

#usablesecurity #CISPA #dataprivacy

https://nextcloud.com/blog/lea-grober-understanding-self-hosting-and-security-through-nextcloud/

🎙️ Understanding #self-hosting and security through 1000 Nextcloud servers

Today's #NextcloudPodcast : Lea Gröber's insights on how the human aspect of your digital infrastructure may be the most important, and yet the least understood.

#usablesecurity #CISPA #dataprivacy

https://nextcloud.com/blog/lea-grober-understanding-self-hosting-and-security-through-nextcloud/

🎙️ Understanding #self-hosting and security through 1000 Nextcloud servers

Today's #NextcloudPodcast : Lea Gröber's insights on how the human aspect of your digital infrastructure may be the most important, and yet the least understood.

#usablesecurity #CISPA #dataprivacy

https://nextcloud.com/blog/lea-grober-understanding-self-hosting-and-security-through-nextcloud/

🎙️ Understanding #self-hosting and security through 1000 Nextcloud servers

Today's #NextcloudPodcast : Lea Gröber's insights on how the human aspect of your digital infrastructure may be the most important, and yet the least understood.

#usablesecurity #CISPA #dataprivacy

https://nextcloud.com/blog/lea-grober-understanding-self-hosting-and-security-through-nextcloud/

🎙️ Understanding #self-hosting and security through 1000 Nextcloud servers

Today's #NextcloudPodcast : Lea Gröber's insights on how the human aspect of your digital infrastructure may be the most important, and yet the least understood.

#usablesecurity #CISPA #dataprivacy

https://nextcloud.com/blog/lea-grober-understanding-self-hosting-and-security-through-nextcloud/

🎙️ Understanding #self-hosting and security through 1000 Nextcloud servers

Today's #NextcloudPodcast : Lea Gröber's insights on how the human aspect of your digital infrastructure may be the most important, and yet the least understood.

#usablesecurity #CISPA #dataprivacy

https://nextcloud.com/blog/lea-grober-understanding-self-hosting-and-security-through-nextcloud/

#CacheWarp (CVE-2023-20592) allows remote code execution and privilege escalation in targeted VMs that rely on AMD Secure Encrypted Virtualization (SEV).

https://cachewarpattack.com/
cheers #cispa, #tugraz

Microcode updates available by AMD for 3rd Gen AMD EPYC Processors. No mitigation for 1st and 2nd Gen.

https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3005.html