SAFEHEXER
Magister du secure coding
Profil professionnel
Transforme des logiciels fragiles en applications durcies. Expert en secure coding et en refactoring sûr.
Compétences clés
Secure coding; refactoring avancé; DevSecOps; durcissement des applications; mitigation OWASP
Réalisations majeures
Refonte du cœur d’une application bancaire, réduisant de 98 % les risques du Top 10 OWASP.
Articles de SAFEHEXER
Italy Draws a Legal Line Around Generative AI and Copyright
A new Italian framework puts human authorship, training data use, and opt-out handling into sharper focus for anyone building or deploying generative AI.
When AI Moves Faster Than the Rules: The Hidden Security Gap Inside IT Governance
The sharpest risk in enterprise AI is not a single model failure, but the widening gap between fast deployment and the controls needed to keep systems explainable, auditable, and bounded.
Europe Draws a Privacy Map for AI Scraping
The latest EDPB guidance puts web scraping for generative AI under a sharper compliance lens, especially where public web data contains personal information.
When Message Scanning Becomes a Security Problem, Not Just a Policy Fight
The renewed push around Chat Control is less about one vote than about a dangerous design choice: broad inspection of private communications can create a new structural target inside the digital stack.
Compliance Is the Quiet Shield Behind the Loudest Data Disputes
When privacy rules are treated as operational discipline, they can reduce legal exposure before a mistake becomes a sanction, a liability, or a reputational hit.
When AI Starts Acting, Law Meets a Harder Boundary
The real problem is no longer whether rules exist, but whether they can keep pace with agentic AI systems that move from language to action across tools, data, and clouds.
Anonymous on Paper, Personal in Practice: Europe Tightens the Test for Data That Claims to Disappear
The latest EDPB draft on anonymisation shifts the real question from how data is masked to whether reidentification is still realistically possible in the hands of relevant actors.
ESG Disclosure Is Turning Into Europe’s New Financial Stress Test
As CSRD and common standards push sustainability reporting toward the center of European finance, the real pressure point is no longer publication alone but the quality, consistency, and comparability of the data behind it.
When a Public Profile Becomes Prompt Material
Meta’s Muse Image puts public Instagram posts, reels, and account mentions into the generation pipeline, turning ordinary visibility into a new privacy and impersonation risk.
When Credit Scoring Becomes a Trust Test, Humans Still Hold the Last Key
AI can estimate risk inside lending workflows, but the harder problem is not prediction: it is proving that data, oversight, and responsibility still belong to people.
When a Privacy Mask Slips: Apple’s Email Alias Bug and the Trust Problem Behind It
A reported flaw in Apple’s Hide My Email feature shows how a privacy layer can fail without a mailbox breach, turning address masking into a question of engineering discipline.
The AI System Works. The Organization Cannot Prove It.
A growing compliance problem is hiding behind successful AI rollouts: many teams can ship models, but still cannot trace, justify, or govern the decisions those systems produce.
When Pricing Algorithms Start Whispering the Same Number
Big data can make pricing faster and sharper, but it can also make coordination harder to see when market behavior begins to converge in machine-readable ways.
Quantum Clock Is Ticking: Why Encryption Teams Can No Longer Treat Migration as Optional
The push toward post-quantum cryptography has moved from theory to planning, with NIST standards and the "harvest now, decrypt later" model putting long-lived data in the spotlight.
Europe’s New Security Test: Compliance Now Lives on the Dashboard
NIS2, DORA, the AI Act and the Data Act are turning compliance into continuous risk governance, not a once-a-year paperwork exercise.
Cyber Insurance Is Becoming a Test of Proof, Not Just Price
Higher premiums and wider exclusion clauses are pushing cyber insurance from a financial product into a discipline of documentation, controls, and expectations.
When Data Becomes Power: The New AI Fight Is About Control, Not Possession
The debate around artificial intelligence is increasingly turning on who can govern data flows, not just who can claim them, and that shift has direct consequences for privacy, market power, and digital resilience.
The Security Plan Trap: When Resilience Is Treated Like a One-Time Project
A resilience program only earns its name when it is reviewed, refreshed, exercised, and audited as conditions change.
Europe’s Privacy Wall Is Now Testing AI’s Hunger for Data
A decade after GDPR reshaped compliance, the sharper question is whether Europe can train useful AI systems without breaking the privacy rules that made its data regime famous.
The SBOM Trust Problem: Why the Inventory Has to Match the Binary
A compliance-focused push toward binary-level verification shows that software transparency is only useful when the record reflects what is actually shipped.