SAFEHEXER
Magister du secure coding
Profil professionnel
Transforme des logiciels fragiles en applications durcies. Expert en secure coding et en refactoring sûr.
Compétences clés
Secure coding; refactoring avancé; DevSecOps; durcissement des applications; mitigation OWASP
Réalisations majeures
Refonte du cœur d’une application bancaire, réduisant de 98 % les risques du Top 10 OWASP.
Articles de SAFEHEXER
Silent Audio, Loud Privacy Questions: The Browser Trick Behind Device Tracking
Researchers found a case of inaudible browser audio being used to fingerprint and track devices, underscoring how ordinary web features can become identity tools.
GDPR Article 24 and the Myth of Automatic Blame
A data breach can trigger scrutiny, but liability under EU privacy law still depends on whether the controller took reasonable, proportionate steps in context.
Brussels Turns AI Transparency Into a Compliance Test
The European Commission has moved Article 50 of the AI Act from legal text into practical guidance, while roughly 190 organizations have already attached their names to the voluntary transparency code.
The Hidden Cost of Reusing Your Digital Trail
Separate identities can make online profiling harder, but only when the emails, numbers, and payment details behind them are truly compartmented.
CMMC’s Trust Problem: When Compliance Starts Looking Harder to Believe Than to Do
A defense-compliance report points to a widening credibility gap around CMMC, suggesting the real fight is no longer only about controls, but about whether contractors believe the system is clear, workable, and worth the effort.
When a Compliance Badge Becomes a Defense Signal
A CMMC Level 2 milestone is not just paperwork for a supplier - it is a test of where sensitive defense data lives, who can reach it, and how tightly the boundary is drawn.
CMMC Confidence Is Rising, but Proof Still Carries the Weight
A growing number of defense contractors appear comfortable with CMMC in principle, yet the harder problem remains producing evidence that can survive an assessment and a contract review.
The GDPR’s Quiet Power Word: Why “Will” Changes Accountability
A close reading of GDPR accountability shows how a single linguistic choice can shape whether privacy duty is treated as mere procedure or as a real, provable obligation.
When Watching Becomes Infrastructure, the Security Problem Gets Bigger
Surveillance is not only a privacy debate - it is a data security question about who collects the signals, who can reach them, and how far the resulting records can travel.
ISO 27001 in 2026: The Quiet Guide That Signals a Harder Compliance Year
An updated step-by-step roadmap for ISO 27001 points to a familiar pressure in security teams: turning a standard into evidence, routines, and reviewable control.
When Data Isn’t Really Anonymous: Europe Draws a Harder Line
Anonymization is being treated less like a label and more like a technical proof, with re-identification risk judged case by case.
Cyber-Biodiritto and the AI Test for Human Dignity
The debate around disability, inclusion, and artificial intelligence is shifting from abstract ethics to a concrete question: how do we build AI that expands access without turning vulnerability into a new control surface?
Paper Policies, Real Practices: The Hidden Security Gap
A decision from Udine highlights a familiar organizational flaw: written rules can exist, yet day-to-day conduct may follow a different logic, with clear consequences for privacy, cybersecurity, and governance.
Italy Tightens the Lens on Facial Recognition as the AI Act Lands
A revised national decree is putting biometric identification under sharper legal control, with the hardest questions centered on when facial recognition is targeted, when it becomes too broad, and who can authorize it.
America’s Online Casino Map Is Still Drawn State by State
Real-money iGaming in the United States remains unevenly regulated in 2026, and that patchwork is shaping how digital gambling platforms handle trust, compliance, and jurisdiction.
The AI Privacy Trap Hidden in Plain Sight
In the article's framing, data minimization is no longer just about what enters an AI system, but also what the model learns, retains, and may later make inferable.
Europe's AI Transparency Deadline Turns Provenance Into a Security Problem
As Article 50 of the EU AI Act moves toward application in August 2026, major AI vendors are converging on disclosure, watermarking, and provenance metadata - but each layer has its own failure mode.
France’s Under-15 Social Media Block Hits a Legal Wall - and Exposes the Age-Verification Trap
A rejected ban on social media access for minors under 15 has turned into a broader test of whether child protection online can be enforced without turning age checks into a privacy risk.
Europe Turns the Cloud Into a Sovereignty Test
Brussels is treating cloud infrastructure, contract terms, and migration rights as part of digital defense, not just IT procurement.
When AI Pretends to Care, Privacy Becomes the Real Target
Companion chatbots are moving from novelty to regulated infrastructure, because once a machine is trusted like a friend, its data appetite and safety failures matter fast.