Corrupting the Secure World: Three Memory-Safety Flaws in OP-TEE
SecMate’s automated analysis discovered three memory-safety issues in OP-TEE, an open-source Trusted OS for Arm TrustZone commonly deployed with …
Ramtine Tofighi Shirazi
Co-Founder and CEO
Ramtine Tofighi Shirazi, Co-Founder and CEO
Ramtine leads SecMate’s mission to make research-grade security a practical tool in your workflow. A former Innovation Director at Quarkslab, he holds a PhD in machine learning applied to cybersecurity. His background in leading large security teams and building commercial solutions from advanced research underpins SecMate’s focus on surfacing high-signal, actionable findings instead of noisy alerts.
5m
Vulnerabilities in NASA CryptoLib
SecMate reported vulnerabilities in NASA CryptoLib. This post covers the six public GitHub Security Advisories affecting the KMC crypto service client …
13m
CVE-2026-20753: Integer Overflow in Slim Bootloader's ext2 Reader
SecMate researchers discovered CVE-2026-20753 in Intel Slim Bootloader: a crafted ext2 superblock could make the bootloader under-allocate its group …
4m
Four Vulnerabilities in Tuya's Arduino TuyaOpen Framework
SecMate found four vulnerabilities in Tuya’s arduino-tuyaopen framework: a DNS heap overflow, an out-of-bounds read in DP handling, a heap …
3m
Memory Safety Vulnerabilities in Renesas FSP Cryptographic and Networking Code
SecMate found seven vulnerabilities in Renesas FSP for RA microcontrollers. The most relevant cases affect RSA verification, AES-XTS finalization, GCM …
9m
Six Vulnerabilities in Siemens SICAM SIAPP SDK
SecMate identified six vulnerabilities in Siemens SICAM SIAPP SDK before version 2.1.7. Five of the affected code paths were present in the public …
15m
Four Memory Safety Vulnerabilities in Golioth's IoT Firmware
We found four memory safety vulnerabilities in Golioth’s IoT firmware SDK and Pouch BLE protocol. Each is independently triggerable under its …
3m
SecMate Joins the Cyber Defense Factory Program
SecMate joins the Cyber Defense Factory, a program led by the French Defence Innovation Agency (AID).
8m
Rust Support in SecMate: Two CVEs in RustFS
SecMate adds Rust support to its AI-powered vulnerability scanner. Our first Rust target? RustFS, where we found an authentication bypass and a remote …
6m
How SecMate Discovered two Vulnerabilities in libcoap
We built an AI-powered vulnerability scanner for embedded systems. Our first real-world test found two vulnerabilities in libcoap, including an …