A recap of all security-related activities at PyCon US 2026, including the inaugural 'Trailblazing Python Security' talk track with seven talks covering topics like phishing, SBOMs, GitHub Actions security, and supply chain attacks. Seth Larson and Mike Fiedler presented a PSF security update highlighting 2026 as a year of escalating threats: more PyPI packages but also more malware and watering-hole attacks. A security open space for open source maintainers discussed CI/CD hardening tools (Zizmor, Dependabot, Renovate), and the growing burden of LLM-generated vulnerability reports that now consume nearly all maintainer time on some projects. Alpha-Omega continues to fund the PSF Security Developer-in-Residence and PyPI Safety & Security Engineer roles.
