SAFEHEXER
Magister du secure coding
Profil professionnel
Transforme des logiciels fragiles en applications durcies. Expert en secure coding et en refactoring sûr.
Compétences clés
Secure coding; refactoring avancé; DevSecOps; durcissement des applications; mitigation OWASP
Réalisations majeures
Refonte du cœur d’une application bancaire, réduisant de 98 % les risques du Top 10 OWASP.
Articles de SAFEHEXER
Italy’s AI Fine Maze: The 7% Figure Is Not What Most Companies Think It Is
Italy’s latest AI Act implementation does more than assign penalties - it creates a multi-authority enforcement map that businesses will have to read before they can read the fine print.
The CRA Clock Is Ticking: Why Vulnerability Reporting Is Becoming a Supply-Chain Test
From 11 September 2026, manufacturers face a reporting regime that turns component traceability, escalation paths, and internal discipline into compliance-critical controls.
When Numbers Become a Cage: AI, Surveillance, and the Fear of Total Calculation
A literary warning about control is used to examine how artificial intelligence can make people feel measurable, predictable, and easier to govern.
Open Source, Different Label: How a Business Shift Can Recast CRA Risk
A project may keep the same code and still land in a different regulatory category when its business model changes, which makes due diligence a security issue, not just a legal one.
NIS2 Has Left the Paper Stage - Now Proof Is the Battlefield
The compliance clock has moved on, and the new challenge is not drafting security policies but showing that controls, evidence, and cyber-risk oversight actually work.
Italy Tightens the AI Liability Lens as Europe Steps Back
With the EU’s proposed AI liability directive withdrawn and Italy’s Decree No. 160 set to take effect on 30 September 2026, companies face a more concrete question: how will AI-related harm be judged under criminal and civil law?
When Clinical AI Meets Liability Law, Every Output Becomes a Potential Exhibit
In Italian healthcare, AI is no longer just a workflow tool - it is becoming a test of documentation, supervision, and legal defensibility under overlapping rules.
The AI Clause Is Becoming the New Contract Fault Line
When AI enters a tech deal, the real risk is rarely the model itself - it is the contract language that fails to define who controls it, what data it touches, and who answers for the output.
Who Decides When Health Data Can Be Reused?
EHDS gives Health Data Access Bodies the job of judging whether a reuse request should be approved, narrowed, or refused, turning legal purpose checks into a high-stakes administrative test.
When Adtech Turns Sensitive Identity Into a Billing Problem
Norway's data watchdog hit Xandr with a record fine after a Grindr-related data relay raised a stark question: when does ordinary advertising plumbing become special-category data handling?
When a Search Engine Must Explain Its Refusals, Privacy Becomes a Control System
A Milan court order reportedly pushes Google’s right-to-oblivion workflow toward document-backed requests and reasoned denials, turning a privacy form into a more accountable decision process.
When AI Becomes Evidence: The New Compliance Fault Line Inside Italian Companies
As AI moves into ordinary business workflows, the real risk is no longer only what the system decides, but whether an organization can prove how that decision was governed.
When Employer Monitoring Becomes Too Curious
Two Slovenian examples put a hard edge on a familiar privacy rule: workplace control can be lawful, but only when it stays proportionate, transparent, and tied to a real need.
Brussels Puts AI Crawlers, Piracy and Royalties Under the Microscope
The European Commission’s copyright consultation points to a broader shift: digital rights are being examined as a systems problem, where AI inputs, licensing signals and cross-border enforcement all have technical consequences.
Italy’s AI Training Map Leaves Companies With the Hardest Job
A new Italian decree appears to build structured AI literacy around schools, public bodies and regulated professions, while businesses may have to satisfy the AI Act’s baseline duties mostly through their own controls.
The New Copyright Battlefield Runs Through AI Training Logs
Generative AI is pushing copyright disputes away from finished outputs and into the harder question of provenance: what was trained, under which rights, and how that can be proven later.
Cheap VPN, Expensive Claims: Reading the Security Stack Behind a Deep Discount
A low monthly price can be the headline, but the real story is what the privacy labels actually imply about cryptography, server design, and traffic handling.
When CE Marking Is Not the Endgame for AI Medical Devices
AI-enabled medical devices need continuous scrutiny after approval because compliance can shift as software, data, and operating conditions change.
Privacy Fails When It Assumes Perfect Behavior
The real test of data protection is not whether people never make mistakes, but whether systems stay safe when they do.
Meta Agreement Puts Minors' Protection Under a Compliance Lens
A reported $17.1 billion agreement tied to Meta and 51 U.S. jurisdictions shows how youth-safety rules become a test of enforceable governance, not just policy language.