Vulnerabilities in NASA CryptoLib
SecMate reported vulnerabilities in NASA CryptoLib. This post covers the six public GitHub Security Advisories affecting the KMC crypto service client …
Ramtine Tofighi Shirazi
Co-Founder and CEO
Ramtine Tofighi Shirazi, Co-Founder and CEO
Ramtine leads SecMate’s mission to make research-grade security a practical tool in your workflow. A former Innovation Director at Quarkslab, he holds a PhD in machine learning applied to cybersecurity. His background in leading large security teams and building commercial solutions from advanced research underpins SecMate’s focus on surfacing high-signal, actionable findings instead of noisy alerts.
13m
CVE-2026-20753: Integer Overflow in Slim Bootloader's ext2 Reader
SecMate researchers discovered CVE-2026-20753 in Intel Slim Bootloader: a crafted ext2 superblock could make the bootloader under-allocate its group …
4m
Four Vulnerabilities in Tuya's Arduino TuyaOpen Framework
SecMate found four vulnerabilities in Tuya’s arduino-tuyaopen framework: a DNS heap overflow, an out-of-bounds read in DP handling, a heap …
3m
Memory Safety Vulnerabilities in Renesas FSP Cryptographic and Networking Code
SecMate found seven vulnerabilities in Renesas FSP for RA microcontrollers. The most relevant cases affect RSA verification, AES-XTS finalization, GCM …
9m
Six Vulnerabilities in Siemens SICAM SIAPP SDK
SecMate identified six vulnerabilities in Siemens SICAM SIAPP SDK before version 2.1.7. Five of the affected code paths were present in the public …
15m
Four Memory Safety Vulnerabilities in Golioth's IoT Firmware
We found four memory safety vulnerabilities in Golioth’s IoT firmware SDK and Pouch BLE protocol. Each is independently triggerable under its …
3m
SecMate Joins the Cyber Defense Factory Program
SecMate joins the Cyber Defense Factory, a program led by the French Defence Innovation Agency (AID).
8m
Rust Support in SecMate: Two CVEs in RustFS
SecMate adds Rust support to its AI-powered vulnerability scanner. Our first Rust target? RustFS, where we found an authentication bypass and a remote …
6m
How SecMate Discovered two Vulnerabilities in libcoap
We built an AI-powered vulnerability scanner for embedded systems. Our first real-world test found two vulnerabilities in libcoap, including an …
12m
Is Vibe Coding a Security Nightmare? A Benchmark of AI Coding Agents
We benchmark 5 AI coding assistants across 240 code samples and find a 71.6% security issue rate. Is AI-powered vibe coding creating security …