SAFEHEXER
Secure Coding Magister
Professional Profile
Transforms fragile software into hardened applications. Expert in secure coding and safe refactoring.
Key Skills
Secure coding; Advanced refactoring; DevSecOps; Application hardening; OWASP mitigation
Major Achievements
Rebuilt the core of a banking app, reducing OWASP Top-10 risks by 98%.
Articles by SAFEHEXER
The Hidden Risk in “Anonymous” Health Data
A 7 million euro privacy sanction shows how easily clinical datasets can become a compliance problem when anonymization is treated as a label instead of a tested technical outcome.
Why Defense Suppliers Are Still Spending While CMMC Phase 2 Waits
A pause in one certification stage has not stopped many Defense Industrial Base organizations from treating cybersecurity as a live contract risk, not a future checkbox.
Why the AI Act Is Measuring Behavior, Not Belief
The legal fight over AI in Europe is less about whether a machine can think and more about what it can do, how independently it acts, and what effects it produces.
Voice Notes, Training Data, and the Quiet Privacy Tradeoff Inside AI Assistants
When spoken prompts can be turned into model fuel, the real security question is no longer what the assistant heard - it is what the system keeps, labels, and reuses.
The Real AI Fight Is Not Smarter Machines - It Is Who Holds the Levers
The sharpest debate around AI is shifting from capability to control: who sets the rules, who sees the logs, and who can challenge automated power when it starts to shape human choices.
Argentina’s AI Gambit: When Lighter Rules Become a Global Security Test
A push to attract AI firms with fewer constraints, limited liability, and tax incentives may look like an economic play, but it also exposes the hidden compliance burden that follows any model crossing borders.
AI Responsibility Is Becoming the New Security Blind Spot
AgID’s guidelines highlight a practical problem in AI governance: when risk turns into harm, the hardest question is often who can be held to account.
Brussels Rekindles an Old Fight Over Traffic Data: It Is the Archive Layout That Matters
A privacy dispute over traffic-data retention is putting a technical detail back in the spotlight: whether sensitive records must live in separate archives, not just be kept for a set period.
Procurement Algorithms Expose a Familiar Governance Trap: What Must Be Visible, and What Can Stay Secret?
A Canada-Italy comparison shows that the real pressure point is not the algorithm itself, but how governments classify it and balance transparency against intellectual property.
When GDPR Penalties Become the Default, Defense Gets Harder
New EDPB guidance is being read as narrowing regulator discretion and making fines more likely for non-minor privacy violations, forcing companies to rethink how they defend themselves in privacy proceedings.
When AI Helps Draft the Idea, Who Signs the Patent?
AI can accelerate research, but patent filing still hinges on a human contribution that can be explained, documented, and defended.
Healthcare’s Data Deluge: Why Smarter Systems Need Steering, Not Just Storage
In digital health, volume alone does not create insight - governance, interoperability, and accountable AI do the real work.
The Quiet Security Stack Behind Pension Sign-Ups
Digital onboarding for pension funds is not just a convenience play - it is a trust architecture built on identity proofing, electronic signatures, seals, and regulated preservation.
When AI Stops Training and Starts Competing
The copyright fight around generative AI is moving from what models ingest to what they sell back to the market.
When Compliance Stops Being a Screenshot and Starts Becoming a System
In the NIS2 era, periodic checklists and manual evidence packs are losing ground to continuous compliance models that tie governance directly to live IT controls.
When AI Deployments Enter the Works Council Zone
A revised EU framework tightens information and consultation duties for multinational groups, and digital systems now sit squarely inside that conversation.
Europe’s Sovereignty Problem Is Not Geography - It Is Dependency
Hosting data inside Europe can help, but it does not deliver control if applications, operations, and governance remain tied to one provider.
Inside the Cloud Compliance Split: Audit Automation on One Side, Posture Control on the Other
A comparison of cloud compliance tools points to a deeper truth: audit readiness and technical cloud security are related, but they are not the same job.
When Public AI Runs on Thin Ice, Small Errors Can Become Public Policy
AI can help resource-strapped administrations sort cases, route aid, and ease pressure on overworked staff, but weak data, weak skills, and weak controls can turn automation into a multiplier of administrative risk.
When the Vote Leaves the Room, the Trust Problem Starts
Digital shareholder meetings are no longer just a convenience play - they are a test of identity, record integrity, and whether online governance can withstand later scrutiny.