BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//programme.europython.eu//europython-2026//speaker//TVA3
 TQ
BEGIN:VTIMEZONE
TZID:Poland
BEGIN:DAYLIGHT
DTSTART:20250715T000000
TZNAME:CEST
TZOFFSETFROM:+0200
TZOFFSETTO:+0200
END:DAYLIGHT
BEGIN:STANDARD
DTSTART:20251026T030000
RDATE:20261025T030000
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20260329T030000
RDATE:20270328T030000
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
SUMMARY:Security and Ethics in the Age of Generative AI - Sylwia Budzynska
 \, Maria Lowas-Rzechonek\, Mike Fiedler\, Seth Michael Larson\, Julien Len
 ormand\, Maria Jose Molina-Contreras
DTSTART;TZID=Poland:20260715T135000
DTEND;TZID=Poland:20260715T145000
DTSTAMP:20261014T015917Z
UID:pretalx-europython-2026-N9HKQN@programme.europython.eu
DESCRIPTION:This panel brings together experts from different corners of t
 he field to talk about how generative AI is changing cybersecurity and the
  tricky challenges that come with it. Not only will we explore the technic
 al aspects\, but also the ethical considerations our society must have wit
 h in this rapidly evolving landscape.\n\nWe're not treating this as just a
  technical conversation. Generative AI in cybersecurity touches code\, str
 ategy\, and ethics all at once\, and we want to dig into all three. By the
  end of the panel\, you should walk away with a clearer sense of the real 
 risks at the language and ecosystem level\, some practical lessons from te
 ams working security operations day to day\, and a more grounded take on t
 he ethical questions this technology raises.
LOCATION:S3A
URL:https://programme.europython.eu/europython-2026/talk/N9HKQN/
END:VEVENT
BEGIN:VEVENT
SUMMARY:Anatomy of a Phishing Campaign - Mike Fiedler
DTSTART;TZID=Poland:20260716T143000
DTEND;TZID=Poland:20260716T150000
DTSTAMP:20261014T015917Z
UID:pretalx-europython-2026-NXNHSB@programme.europython.eu
DESCRIPTION:In July 2025\, PyPI users received emails directing them to py
 pj.org—a near-perfect clone transparently proxying requests to pypi.org.
  Within hours\, attackers compromised four accounts and uploaded malicious
  releases of the popular num2words package.\n\nThis talk dissects the comp
 lete attack chain: how attackers harvested email addresses from public pac
 kage metadata\, built a transparent proxy that relayed TOTP codes in real-
 time\, and why traditional 2FA failed while WebAuthn-based authentication 
 stopped the attack cold.\n\nThe session covers the incident response timel
 ine\, challenges getting malicious infrastructure taken down (including in
 itial rejection of abuse reports)\, and defensive measures deployed afterw
 ard—including new email verification for TOTP logins from unrecognized d
 evices.\n\nAttendees will learn exactly how modern phishing attacks work a
 gainst package repositories\, the critical difference between "phishable" 
 and "phishing-resistant" 2FA\, and practical steps to protect accounts and
  packages from the next campaign. The talk also examines the September 202
 5 follow-up campaign targeting pypi-mirror.org and patterns across these o
 ngoing attacks.
LOCATION:S1
URL:https://programme.europython.eu/europython-2026/talk/NXNHSB/
END:VEVENT
END:VCALENDAR
