4+ day, 9+ hour ago   (321+ words) This date has been circled on compliance calendars for over a year, but it catches most web agencies off guard for a specific reason: the CRA's headline design and documentation requirements don't apply until December 11, 2027. Article 14 reporting is the exception…...

6+ day, 9+ hour ago   (241+ words) Part 2 of 3 — the decision framework: what each technique actually trades away, the join-key dilemma, and why your hashed emails are still personal data. Tagged with dataengineering, security, dataprivacy, gdpr....

2+ week, 6+ day ago   (339+ words) 2025‑2026 Breach Metrics: Why Leaks Still Occur A deeper dive shows that the most common technical failures are insecure default settings, missing encryption keys, and unpatched third‑party libraries. On the human side, credential‑stuffing, phishing, and privileged‑account abuse account…...

3+ week, 2+ day ago   (998+ words) Almost every company wants to be data-driven. But not every company can clearly answer a simple question: who can actually access its data? The problem is not always a lack of data. Very often, the problem is that data is…...

3+ week, 3+ day ago   (415+ words) A model answered our question. It would not tell us why. That refusal is the entire case for governed AI. Today we added a new frontier model to SAFi, pointed one of our agents at it, and watched every single…...

3+ week, 6+ day ago   (837+ words) One rule before we start, and it applies to this entire series. Every hands on exercise happens only on systems I own or on platforms built for legal practice like TryHackMe and OWASP Juice Shop. Learning security responsibly is part…...

3+ week, 6+ day ago   (998+ words) When I was entrusted with security responsibility I had one principle clear. You cannot protect what you do not understand. That is why I built a custom risk framework, divided into three pillars. Application security and hardening, perimeter defense against…...

4+ week, 3+ hour ago   (624+ words) Ich hätte das nicht geplant. Anfang 2025 habe ich angefangen, Guard-Regeln in mein KI-System einzubauen. Nicht wegen GDPR, nicht wegen dem AI Act, nicht wegen einem Juristen, der mir gesagt hat, ich müsse das. Sondern weil mein System sonst nicht verlässlich…...

4+ week, 1+ day ago   (1613+ words) Data privacy is one of those topics everyone has an opinion on, but few people fully understand, and that gap is exactly where bad decisions get made. Most people assume they are either fully protected by the law or fully…...