Tradecraft

The first step towards being more secure

Since the coronavirus outbreak, many teams have moved to remote work. In this post we talk about some of the security questions that…

When confidential information is just sitting there…

Why you should do it, and what you should look for

It’s been a little over two years since Glyn and I founded dxw cyber as an offshoot from dxw digital, a digital agency for public sector…

When an attacker logs into your web application

During our attack simulations we regularly find vulnerabilities in third-party applications used by our clients. Often these are…

When an attacker tricks your application into running commands

At Tradecraft, we spend a lot of time thinking about scope. If you cherry-pick certain bits of infrastructure to look at, and don’t give…