SAFEHEXER
Magíster de código seguro
Perfil profesional
Transforma software frágil en aplicaciones endurecidas. Experto en código seguro y refactorización segura.
Competencias clave
Código seguro; refactorización avanzada; DevSecOps; hardening de aplicaciones; mitigación OWASP
Logros principales
Reconstruyó el núcleo de una aplicación bancaria, reduciendo en un 98% los riesgos del OWASP Top 10.
Artículos de SAFEHEXER
EDPB’s Latest Opinions Put Europrivacy Closer to Cross-Border Transfer Checks
Europrivacy may now be relevant for transfers of personal data outside the EEA, but only under specific conditions tied to accountability, independent review, and documented safeguards.
The Quiet Race to Rebuild Finance Before Quantum Computing Catches Up
A Treasury-backed push toward quantum-resistant encryption points to a simple warning for banks and payment networks: the time to replace vulnerable cryptography is before it becomes a liability.
Why Payee Checks Are Moving Into the Heart of Corporate Payments
Verification of Payee is becoming a practical control point in treasury and administration, where clear interfaces, configurable rules, and ERP integrations can help turn compliance into a barrier against errors, mismatches, and attempted fraud.
When Software Can Shut a Working Life Off in Seconds
An 800 million euro sanction over automated driver account deactivations shows how platform governance can fail when machine decisions outrun human review.
The New Financial Risk Is Not Blind AI - It Is Unexplained AI
In regulated finance, explainability is moving from a nice-to-have to a control that helps institutions defend decisions, satisfy oversight, and reduce the operational cost of opaque models.
The Hiring Box Is Not Neutral: Why AI Screening Still Needs Human Control
AI can speed up recruitment, but in hiring pipelines the main security question is whether automated scoring can be audited, challenged, and kept from turning old bias into new policy.
When Factory Glass Becomes a Data Trap
Industrial augmented reality can improve maintenance and guidance, but it also turns a factory into a layered data system where privacy, access control, trade secrets, and AI oversight collide.
Why Public Digital Projects Stall When Governance Is Treated as an Afterthought
The hardest part of digital transition in public administration is not launching new services, but keeping data, responsibilities, and skills aligned as complexity grows.
Automated Account Rules Just Triggered a Billion-Euro Warning Shot
A major GDPR penalty shows how automated suspensions can turn routine platform enforcement into a privacy, governance, and accountability problem.
The Cloud Door Is Not Enough: Why Europe’s Exit Rights Still Depend on Engineering
The Data Act narrows cloud lock-in on paper, but real switching still depends on architecture, contracts, and rehearsed migration steps.
Silent Audio, Loud Privacy Questions: The Browser Trick Behind Device Tracking
Researchers found a case of inaudible browser audio being used to fingerprint and track devices, underscoring how ordinary web features can become identity tools.
GDPR Article 24 and the Myth of Automatic Blame
A data breach can trigger scrutiny, but liability under EU privacy law still depends on whether the controller took reasonable, proportionate steps in context.
Brussels Turns AI Transparency Into a Compliance Test
The European Commission has moved Article 50 of the AI Act from legal text into practical guidance, while roughly 190 organizations have already attached their names to the voluntary transparency code.
The Hidden Cost of Reusing Your Digital Trail
Separate identities can make online profiling harder, but only when the emails, numbers, and payment details behind them are truly compartmented.
CMMC’s Trust Problem: When Compliance Starts Looking Harder to Believe Than to Do
A defense-compliance report points to a widening credibility gap around CMMC, suggesting the real fight is no longer only about controls, but about whether contractors believe the system is clear, workable, and worth the effort.
When a Compliance Badge Becomes a Defense Signal
A CMMC Level 2 milestone is not just paperwork for a supplier - it is a test of where sensitive defense data lives, who can reach it, and how tightly the boundary is drawn.
CMMC Confidence Is Rising, but Proof Still Carries the Weight
A growing number of defense contractors appear comfortable with CMMC in principle, yet the harder problem remains producing evidence that can survive an assessment and a contract review.
The GDPR’s Quiet Power Word: Why “Will” Changes Accountability
A close reading of GDPR accountability shows how a single linguistic choice can shape whether privacy duty is treated as mere procedure or as a real, provable obligation.
When Watching Becomes Infrastructure, the Security Problem Gets Bigger
Surveillance is not only a privacy debate - it is a data security question about who collects the signals, who can reach them, and how far the resulting records can travel.
ISO 27001 in 2026: The Quiet Guide That Signals a Harder Compliance Year
An updated step-by-step roadmap for ISO 27001 points to a familiar pressure in security teams: turning a standard into evidence, routines, and reviewable control.