What does it take to keep Python secure for the next decade? 🔒🐍 William Woodruff explores the future of Python security, evolving threats, and how defenders need to adapt during this #EuroPython2026 keynote. 🎥 Watch now!! www.youtube.com/watch?v=wMPe...

Keynote: Securing Python for the next decade - William Woodruff

[EuroPython 2026 - Keynote - S1 on 2026-07-17] 🎤 *Securing Python for the next decade by William Woodruff* 🔗 https://ep2026.europython.eu/session/securing-python-for-the-next-decade 📝…

youtube.com

10 years after its first release, LIEF 1.0.0 is officially out with a brand-new Runtime API and DWARF/PDB -> C/C++ generation! lief.re/blog/2026-07...

Le #SSTIC ne semble toujours pas sur BlueSky 😢 Programme en ligne : www.sstic.org/2026/program...

Dependency cooldowns, redux https://blog.yossarian.net/2025/12/13/cooldowns-redux #security #oss

There's a nasty #OpenSource #SupplyChain worm going around named Shai-Hulud. It's also capable of exposing some projects' long-lived PyPI API Tokens. Read more on what's happening, and what you can do to protect your projects. TL,DR: Adopt Trusted Publishing 🔐🚀📦 blog.pypi.org/posts/2025-1...

PyPI and Shai-Hulud: Staying Secure Amid Emerging Threats - The Python Package Index Blog

Shai-Hulud is a great worm, not yet a snake. Attack on npm ecosystem may have implications for PyPI.

blog.pypi.org

I'm thrilled to announce that after months of intensive work, the complete materials for my Applied Cryptography course at the American University of Beirut are now finished: both Part 1 (Provable Security) and Part 2 (Real-World Cryptography)!

my colleague @darkamaul.bsky.social has a new blog post on the @trailofbits.bsky.social blog about how we worked with @pypi.org's maintainers to slash test times on PyPI by over 80%: blog.trailofbits.com/2025/05/01/m...

Making PyPI's test suite 81% faster

See how we slashed PyPI’s test suite runtime from 163 to 30 seconds. The techniques we share can help you dramatically improve your own project’s testing performance without sacrificing coverage.

blog.trailofbits.com

Fuzzing Windows ARM64 binaries with a DBI and LLVM? Here we go: www.romainthomas.fr/post/25-04-w...

zizmor would have caught the Ultralytics workflow vulnerability https://blog.yossarian.net/2024/12/06/zizmor-ultralytics-injection #security #oss

Excited to be part of the lineup at @districtcon.bsky.social first conference! Can't wait to see everyone in Washington DC

DistrictCon@districtcon.bsky.social · 2y ago

DistrictCon Talks Have Been Selected🎙️ www.districtcon.org/speakers Check out our incredible speaker lineup for DistrictCon 2025. Agenda (and more talk announcements) coming soon