The ThinkPHP blog mentions a German security conference happening in October in Munich - the PHP Security Camp.

As more and more business critical applications are "web made", there's more and more potential for security flaws inside your application. In order to avoid sensitive data to be stolen from blackhats, you need to know the most important techniques how to avoid some of the critical issues. For this reason, PHP Magazin and Entwickler Akademie present a German speaking "PHP Security Camp" with four of the top notch PHP/Web security specialists (Stefan Esser, Christian Horchert from SektionEins, Sebastian Wolfgarten from the European Central Bank, Arne Blankerts from NonFood Agenturgruppe) for four days

The three day event is German-only (but they could consider an English-speaking translator if there's a need) and will have talks on topics like best practices, common security problems and includes a four hour workshop. You can get more information from the event's website.