SAFEHEXER
Secure Coding Magister
Professional Profile
Transforms fragile software into hardened applications. Expert in secure coding and safe refactoring.
Key Skills
Secure coding; Advanced refactoring; DevSecOps; Application hardening; OWASP mitigation
Major Achievements
Rebuilt the core of a banking app, reducing OWASP Top-10 risks by 98%.
Articles by SAFEHEXER
The FCA’s AI Reporting Push Could Turn Missed Harm Into a New Compliance Signal
Jessica Rusu’s call for firms to disclose significant AI failures and near-misses is less about one incident than about whether regulators can make agentic systems observable before they become operational risk.
The Soft Voice of Machine Influence: Why Generative AI Is Raising a Trust Alarm
The real risk is not that AI feels human, but that its human-like style can blur disclosure, guidance, and persuasion in ways users may not notice.
EU cyber rules are forcing industrial vendors to prove security, not just promise it
As the Cyber Resilience Act moves through staged implementation, industrial product makers are being pushed to turn compliance into evidence, with reporting duties already active and the main obligations still ahead.
When a Pause Becomes a Profile: How Social Feeds Turn Dwell Time Into Targeting
A brief stop on a video can be enough for ad systems to infer interest, showing how weak behavioral signals can push feeds toward more of the same.
When Privacy Law Meets Operational Risk, the Split Between Safety and Security Starts to Collapse
A legal reading of GDPR and NIS 2 points to a narrower but important lesson: in some environments, protecting data, people, and systems can no longer be treated as separate jobs.
When Cybersecurity Becomes a Boardroom Liability Test
NIS2 is reportedly pushing cyber risk out of the server room and into the domain of directors, where oversight, documentation, and accountability matter as much as technical controls.
A Face in the Crosshairs: Why U.S. Police Biometric Rules Still Fracture by City
The policy gap around police facial recognition in the United States leaves agencies navigating a patchwork of local limits, while the risk of biometric error remains a live operational and civil-rights problem.
Silent Number Sync on Android Raises a New Consent Alarm
A reported Google Play Services behavior that ties one phone number to multiple Google accounts on the same Android device highlights how identity plumbing can move faster than user awareness.
When Security Programs Break the Silo Habit, the Real Risk Is in the Gaps
A general enterprise security guide points to a familiar truth: endpoint defense, network control, and cloud governance only work together when visibility, responsibility, and response are aligned.
Italy’s AI Oversight Split Creates a New Compliance Map - and New Friction
Italy’s AI Act framework distributes supervision across ACN, AgID, and the Garante, a design that may strengthen specialization but also makes coordination and accountability harder to read in practice.
Europe’s Privacy Reset Could Redraw the Rules of Compliance
The Digital Omnibus is still a proposal, but its plan to streamline cookies, consent, breach reporting, and AI governance is already forcing teams to rethink how they map risk.
Italy’s AI Fine Maze: The 7% Figure Is Not What Most Companies Think It Is
Italy’s latest AI Act implementation does more than assign penalties - it creates a multi-authority enforcement map that businesses will have to read before they can read the fine print.
The CRA Clock Is Ticking: Why Vulnerability Reporting Is Becoming a Supply-Chain Test
From 11 September 2026, manufacturers face a reporting regime that turns component traceability, escalation paths, and internal discipline into compliance-critical controls.
When Numbers Become a Cage: AI, Surveillance, and the Fear of Total Calculation
A literary warning about control is used to examine how artificial intelligence can make people feel measurable, predictable, and easier to govern.
Open Source, Different Label: How a Business Shift Can Recast CRA Risk
A project may keep the same code and still land in a different regulatory category when its business model changes, which makes due diligence a security issue, not just a legal one.
NIS2 Has Left the Paper Stage - Now Proof Is the Battlefield
The compliance clock has moved on, and the new challenge is not drafting security policies but showing that controls, evidence, and cyber-risk oversight actually work.
Italy Tightens the AI Liability Lens as Europe Steps Back
With the EU’s proposed AI liability directive withdrawn and Italy’s Decree No. 160 set to take effect on 30 September 2026, companies face a more concrete question: how will AI-related harm be judged under criminal and civil law?
When Clinical AI Meets Liability Law, Every Output Becomes a Potential Exhibit
In Italian healthcare, AI is no longer just a workflow tool - it is becoming a test of documentation, supervision, and legal defensibility under overlapping rules.
The AI Clause Is Becoming the New Contract Fault Line
When AI enters a tech deal, the real risk is rarely the model itself - it is the contract language that fails to define who controls it, what data it touches, and who answers for the output.
Who Decides When Health Data Can Be Reused?
EHDS gives Health Data Access Bodies the job of judging whether a reuse request should be approved, narrowed, or refused, turning legal purpose checks into a high-stakes administrative test.