Transport for London [006]
Posted on Friday, Mar 7, 2025
Show Notes
The Transport for London (Operator of the London UK region’s transit network) was crippled by a cyber attack in September, 2024 that had widespread impacts on it’s operation. Fortunately safety was not a casualty, but we explore a bit of the nuance in incident response, segmnentation and other important lessons from this hack.
Boy arrested over London transport cyber hack
TfL writes to 5,000 cyber attack customers
TfL cyber attack: What you need to know
Cyber security recovery
TfL provides update on ongoing cyber security incident - 12 September
TfL cyber attack cost over 30 million pounds to date
TfL cyberattack bites into profits with 30 million pounds spent on recovery
“An utter shitshow”: Inside the Transport for London cyberattack
Hosts
Chester Wisniewski (He/Him)
Chester Wisniewski is an old hat to information security having practiced the art professionally for more than 25 years. Starting out with a 300 baud modem in the 80s he became obsessed with exploring the world’s phone networks (phreaking?) which inevitably led to bulletin boards and early internet access in the mid-80s. The trust inherent in the system seemed absurd and this inspired Chester to pursue how we might build systems less prone to abuse. The rest is history.
Ben Verschaeren (He/Him)
Ben has been in Information Technology for two decades starting at the age of 14. Recently described by a senor executive as an “Adult Dennis the Menace”, Ben’s always up for a bit of cyber mayhem. Having worked across, Managed Services Providers, two of Australia’s largest Enterprises and an almost decade at a Security Vendor. Ben’s experience spans Wintel System Administration, Network Administration, Penetration Testing, and Software Development.