SAFEHEXER
Magíster de código seguro
Perfil profesional
Transforma software frágil en aplicaciones endurecidas. Experto en código seguro y refactorización segura.
Competencias clave
Código seguro; refactorización avanzada; DevSecOps; hardening de aplicaciones; mitigación OWASP
Logros principales
Reconstruyó el núcleo de una aplicación bancaria, reduciendo en un 98% los riesgos del OWASP Top 10.
Artículos de SAFEHEXER
The Paper Trail of Moderation: How the DSA Makes Platform Power Visible
The Digital Services Act pushes online enforcement decisions into the open, forcing platforms to explain why content is removed, deprioritized, or an account is suspended.
When a VPN Sells Trust, the Real Product Is Verifiability
Proton VPN’s transparency pitch puts open-source code, public audits, and jurisdiction in the same frame, but those controls answer different questions and leave different blind spots.
Inside the Clinic’s New Trust Problem: When AI Use Becomes Information That Patients May Need
Healthcare AI is no longer just a technical layer - it is part of the consent question, the privacy perimeter, and the clinical trust model.
Why SBOMs Are Turning Into the New Front Line of Software Risk
A new ENISA-focused discussion puts the Software Bill of Materials in a different light: not as paperwork, but as a control that can shape supply-chain visibility, governance, and regulatory readiness.
When Compliance Meets the Firewall, Policy Becomes a Live Test
NIS2 and DORA are pushing organizations toward proof, not promises, and NSPM sits in the gap between what security teams intend and what their networks actually enforce.
The AI Memory Trap: Why Deleting Data Is Not the Same as Making Models Forget
When personal data has already shaped an AI system, erasing the record is only the first step - the harder problem is removing its influence from the model itself.
DuckDuckGo Puts Link Cleanup on the Share Sheet
A new iPhone feature trims tracking parameters from copied URLs, turning a small privacy step into a default part of sharing.
South Australia Turns AI Into a Formal Test of Power, Risk, and Public Trust
A Royal Commission into artificial intelligence will put governance under a microscope, with the real stakes centered on control, accountability, and how public institutions handle fast-moving technology.
Europe’s New Software Rulebook Is Rewriting Open Source Responsibility
The Cyber Resilience Act is pushing open-source ecosystems toward named roles, traceable dependencies, and formal incident workflows long before many teams are ready.
Italy’s Influencer Market Is Learning That Trust Must Be Written Down
A tighter compliance mix around AGCOM, Digital Chart IAP, ATECO classification and INPS clarifications is pushing creator marketing toward clearer responsibility and cleaner disclosure.
When NIS2 Makes Incident Response a Boardroom Decision
The security question is no longer only how fast a team can contain an alert, but how quickly it can translate that alert into operational impact, supplier risk, communication needs, and the cost of interruption.
When Classroom AI Begins to Decide, Not Just Describe
Learning analytics are moving into a more powerful role in education, where software can shape paths, recommendations, and oversight questions at the same time.
Privacy’s Paper Shield Is Cracking Under Modern Data Risk
GDPR pushed privacy into the boardroom, but the real test is no longer paperwork: it is whether systems collect less, protect more, and resist misuse by design.
When a Single Word Becomes a Security Duty
In GDPR language, "shall" is more than grammar: it marks a binding obligation for the data controller to turn privacy principles into adequate protection.
The Hidden Cost of Making Trust Auditable
A debate about Made in Italy is really a debate about how far ESG compliance can stretch before it starts reshaping production, supplier oversight, and competitiveness.
Why Climate Risk Is Now an Auditor’s Problem
ISO management-system work is expanding beyond routine control checks, with climate-related context, risk, and emergency planning becoming part of what auditors are expected to examine.
City AI Is No Longer a Free Experiment: The EU Rulebook Is Already Biting
For Italian municipalities, the AI Act is turning routine tools like chatbots, smart cameras, and social-service software into compliance-sensitive systems that must be checked before they are trusted.
When Holidays Become a Security Test, Compliance Stops Being Paperwork
Summer staffing gaps and looming autumn deadlines expose whether NIS2 and DORA are backed by real, repeatable cyber operations.
The Hidden Trap in Electronic Invoices: Receiving Is Not the Same as Keeping
A simple gap in invoice retention shows how a workflow built for delivery can leave compliance blind spots if preservation is treated as an afterthought.
When a Wrong Invoice Date Becomes a Compliance Problem
A single incorrect payment deadline in an electronic invoice can trigger a correction path that depends on whether the issuer fixes the record with a communication or replaces the document entirely.