Five Bosch Sensortec SensorAPI and COINES SDK Vulnerabilities
SecMate found five memory-safety vulnerabilities in Bosch Sensortec’s BHI360, BHI385 and BME690 Sensor APIs and the COINES sensor evaluation …
Ramtine Tofighi Shirazi
Co-Founder and CEO
Ramtine Tofighi Shirazi, Co-Founder and CEO
Ramtine leads SecMate’s mission to make research-grade security a practical tool in your workflow. A former Innovation Director at Quarkslab, he holds a PhD in machine learning applied to cybersecurity. His background in leading large security teams and building commercial solutions from advanced research underpins SecMate’s focus on surfacing high-signal, actionable findings instead of noisy alerts.
20m
From USB to ESP: CPG-Guided Local Analysis
How SecMate reduces repository-scale analysis to source-backed CPG evidence slices, applied to three disclosed vulnerabilities in Espressif USB host …
14m
Corrupting the Secure World: Three Memory-Safety Flaws in OP-TEE
SecMate’s automated analysis discovered three memory-safety issues in OP-TEE, an open-source Trusted OS for Arm TrustZone commonly deployed with …
5m
Vulnerabilities in NASA CryptoLib
SecMate reported vulnerabilities in NASA CryptoLib. This post covers the six public GitHub Security Advisories affecting the KMC crypto service client …
13m
CVE-2026-20753: Integer Overflow in Slim Bootloader's ext2 Reader
SecMate researchers discovered CVE-2026-20753 in Intel Slim Bootloader: a crafted ext2 superblock could make the bootloader under-allocate its group …
4m
Four Vulnerabilities in Tuya's Arduino TuyaOpen Framework
SecMate found four vulnerabilities in Tuya’s arduino-tuyaopen framework: a DNS heap overflow, an out-of-bounds read in DP handling, a heap …
3m
Memory Safety Vulnerabilities in Renesas FSP Cryptographic and Networking Code
SecMate found seven vulnerabilities in Renesas FSP for RA microcontrollers. The most relevant cases affect RSA verification, AES-XTS finalization, GCM …
9m
Six Vulnerabilities in Siemens SICAM SIAPP SDK
SecMate identified six vulnerabilities in Siemens SICAM SIAPP SDK before version 2.1.7. Five of the affected code paths were present in the public …
15m
Four Memory Safety Vulnerabilities in Golioth's IoT Firmware
We found four memory safety vulnerabilities in Golioth’s IoT firmware SDK and Pouch BLE protocol. Each is independently triggerable under its …
3m
SecMate Joins the Cyber Defense Factory Program
SecMate joins the Cyber Defense Factory, a program led by the French Defence Innovation Agency (AID).