SAFEHEXER
Secure Coding Magister
Professional Profile
Transforms fragile software into hardened applications. Expert in secure coding and safe refactoring.
Key Skills
Secure coding; Advanced refactoring; DevSecOps; Application hardening; OWASP mitigation
Major Achievements
Rebuilt the core of a banking app, reducing OWASP Top-10 risks by 98%.
Articles by SAFEHEXER
NIS2’s Quiet Trap: When Service Maps Become the Real Security Test
The compliance problem is not how many assets you can list, but whether you can map activities and services into a usable structure that supports real risk analysis.
Europe’s New Cyber Test Is No Longer About Paperwork
The Cyber Resilience Act turns connected products into regulated security objects, and many organizations still look unprepared for the 24-hour clock.
AI’s Hidden Parts List Just Became a Security Problem
New AI supply-chain guidance is pushing procurement teams to ask a harder question: not just what an AI tool does, but what models, data, and dependencies shape its behavior.
When Security Starts Measuring People: Why AI Trust Is Now a Control Surface
In AI-enabled cybersecurity, trust is no longer a soft value; it is part of the architecture, shaped by GDPR, human oversight, and the way systems handle personal data.
AI Governance Has Become a Boardroom Security Problem
As companies adopt AI, the real exposure is no longer only technical performance: it is whether directors can prove who owned the system, what controls were in place, and how algorithmic risk was managed.
When Staff Move Faster Than Policy: The Quiet Rise of Shadow AI in the Public Sector
A pause in formal guidance can leave a gap that employees fill on their own, and in public administration that gap can turn into an invisible governance problem.
When a Quiet Warning Becomes a Cyber Control Problem
In the NIS2 era, a suspicious login or a suspected data leak is not just a complaint to file; it can become the first signal that an organization’s security governance is working, or failing.
UK Water Fine Shows How a Breach Becomes a Board-Level Liability
A regulator’s penalty against a water operator and its parent company underlines a hard lesson for critical infrastructure: when personal data security slips, the fallout can move from the server room to the boardroom fast.
When Fair Pay Becomes a Control Plane: The EU Court Ruling That Tightens Platform-Press Bargaining
A ruling on Italy’s online press compensation model shows how copyright disputes can turn into regulated workflows, with fallback powers for the watchdog and new pressure on platform compliance.
Instagram’s Encryption Retreat Exposes the Fragility of “Private” DMs
Ending support for optional end-to-end encrypted chats in direct messages changes the privacy boundary: some conversations now depend more on platform controls than on cryptographic secrecy.
NIS2 Turns Supplier Risk Into a Security Problem You Cannot Outsource
The regulatory shift around NIS2 frames digital supply-chain security as a shared responsibility, pushing organizations to treat external dependencies as part of their own cyber perimeter.
Brussels’ Quiet Rewrite of “Personal Data” Could Reshape Europe’s Privacy Perimeter
The Digital Omnibus proposal is not just a drafting exercise: it puts identifiability, pseudonymization, and regulatory reach back at the center of the GDPR debate.
When Regulation Moves to the Pocket: NIS2 and the New Politics of Mobile Risk
NIS2 is pushing cybersecurity beyond the server room, and the mobile device is becoming one of the most sensitive places where policy, access, and operational trust now meet.
When Equality Becomes a Number: Europe’s Gender Gap Is Now a Compliance Test
Gender parity is increasingly being measured, documented, and compared through official indicators, certification tools, and pay-transparency rules.
When AI Rules Become Architecture, Governance Starts Paying Off
The real shift in AI sovereignty is not more paperwork; it is building control, privacy, and decision rights into the system before the model ever goes live.
When Data Sovereignty Becomes a Survival Test
For enterprises, control over information is no longer just a privacy or infrastructure issue; it is a test of whether operations can keep running when legal, technical, or geopolitical conditions shift.
When Encrypted Chats Lose Their Shield, the Real Story Is the Architecture Shift
Meta’s decision to end end-to-end encryption on Instagram DMs is not a breach story, but it does redraw the privacy boundary for anyone using the app for sensitive conversations.
Chrome’s New Location Dial Turns Down the Spyglass
Google is bringing an approximate-location choice to Chrome for Android, replacing the old allow-or-block model and forcing websites to work with less precision when users choose privacy over pinpointing.
Instagram Cuts the Encryption Cord on Direct Messages
Reported changes to Instagram’s DM system suggest a shift away from endpoint-only confidentiality and toward a model where the platform can process more of what users send.