SAFEHEXER
Magíster de código seguro
Perfil profesional
Transforma software frágil en aplicaciones endurecidas. Experto en código seguro y refactorización segura.
Competencias clave
Código seguro; refactorización avanzada; DevSecOps; hardening de aplicaciones; mitigación OWASP
Logros principales
Reconstruyó el núcleo de una aplicación bancaria, reduciendo en un 98% los riesgos del OWASP Top 10.
Artículos de SAFEHEXER
When Adtech Turns Sensitive Identity Into a Billing Problem
Norway's data watchdog hit Xandr with a record fine after a Grindr-related data relay raised a stark question: when does ordinary advertising plumbing become special-category data handling?
When a Search Engine Must Explain Its Refusals, Privacy Becomes a Control System
A Milan court order reportedly pushes Google’s right-to-oblivion workflow toward document-backed requests and reasoned denials, turning a privacy form into a more accountable decision process.
When AI Becomes Evidence: The New Compliance Fault Line Inside Italian Companies
As AI moves into ordinary business workflows, the real risk is no longer only what the system decides, but whether an organization can prove how that decision was governed.
When Employer Monitoring Becomes Too Curious
Two Slovenian examples put a hard edge on a familiar privacy rule: workplace control can be lawful, but only when it stays proportionate, transparent, and tied to a real need.
Brussels Puts AI Crawlers, Piracy and Royalties Under the Microscope
The European Commission’s copyright consultation points to a broader shift: digital rights are being examined as a systems problem, where AI inputs, licensing signals and cross-border enforcement all have technical consequences.
Italy’s AI Training Map Leaves Companies With the Hardest Job
A new Italian decree appears to build structured AI literacy around schools, public bodies and regulated professions, while businesses may have to satisfy the AI Act’s baseline duties mostly through their own controls.
The New Copyright Battlefield Runs Through AI Training Logs
Generative AI is pushing copyright disputes away from finished outputs and into the harder question of provenance: what was trained, under which rights, and how that can be proven later.
Cheap VPN, Expensive Claims: Reading the Security Stack Behind a Deep Discount
A low monthly price can be the headline, but the real story is what the privacy labels actually imply about cryptography, server design, and traffic handling.
When CE Marking Is Not the Endgame for AI Medical Devices
AI-enabled medical devices need continuous scrutiny after approval because compliance can shift as software, data, and operating conditions change.
Privacy Fails When It Assumes Perfect Behavior
The real test of data protection is not whether people never make mistakes, but whether systems stay safe when they do.
Meta Agreement Puts Minors' Protection Under a Compliance Lens
A reported $17.1 billion agreement tied to Meta and 51 U.S. jurisdictions shows how youth-safety rules become a test of enforceable governance, not just policy language.
AI Law Is Turning Contracts Into Cyber Controls
The meeting point of the EU AI Act and NIS2 is pushing AI governance out of the legal department and into security operations, procurement, and supplier oversight.
The AI Label Trap: Why “Generated by AI” Is Only the First Clue
The real security problem is not whether synthetic content is tagged, but whether its origin, edits, and responsibility trail can still be verified after it spreads.
Invisible Email Pixels, Visible Compliance Pressure
A small tracking element inside marketing mail now sits inside a larger privacy question: whether organizations can explain, control, and justify every signal they collect.
When AI Agents Handle Data, Privacy Moves Into the Architecture
A DPIA can still matter for agentic AI, but the real privacy outcome is often decided earlier, in the way memory, services, data, and controls are built.
When Privacy Software Becomes Infrastructure, the Real Battle Is Workflow Control
A use-case-based roundup of privacy platforms points to a bigger shift: the winners are the tools that turn DSARs, consent, and governance into live operational controls instead of manual paperwork.
Italy’s Cyber Resilience Act Puzzle: Oversight Named, Enforcement Still Unfinished
A national decree places ACN in the market-surveillance role for the Cyber Resilience Act, but the missing sanctions procedure leaves compliance with an important legal gap.
Smart Glasses, Soft Law, Hard Questions
Australia’s privacy watchdog has opened an investigation into the maker of the HeyCyan smart glasses app, a reminder that wearable devices often concentrate the most sensitive data inside the companion phone software.
When Deindexing Becomes Evidence Work: Milan Pushes Google’s Privacy Forms Into a New Era
A court order in Milan is reshaping how search deindexing requests are handled, requiring evidence uploads and reasoned refusals instead of bare form submissions.
Italy's Health-Data Bottleneck: When Anonymization Still Needs a Legal Key
A sanction tied to IQVIA has sharpened a wider compliance problem: even when personal identifiers are stripped out, the party designing the process may still be treated as the controller without a clear legal basis to proceed.