Incident Response
The Weather Server Did It: ATNS and the Secondary Systems That Sink You
Air Traffic and Navigation Services (ATNS) manages 10% of the world’s airspace, according to MyBroadband’s report of 2 October 2026 ; TimesLive puts the figure at more than 6%. MyBroadband also reports that preliminary investigations found malware “commonly associated with the early stages of ransomware attacks” in the operational technology (OT) environment at Chief Dawid Stuurman International Airport. Facts as publicly reported at 2 October 2026; the investigation is ongoing and details may change. The reporting names a weather support system as the affected system. It does not establish that system as the origin, and it does not state how access was gained. Avi-Go reports the tender documents are unclear on whether East London Airport was also affected.
The Breach a Journalist Had to Report: What Gauteng's e-Panic Button Teaches Us About Section 22
On 21 September, GroundUp told the Gauteng government and the vendor behind its e-Panic Button app that the database behind the app was unsecured. According to GroundUp’s investigation, the exposed data included names, phone numbers, email addresses, vehicle registration numbers, GPS coordinates and movement histories, the contents of crime reports, and more than 5,000 report photographs. Some reports concerned domestic violence and assault. The vendor, Evolve Value Added Services, responded and fixed the reported vulnerabilities. The government’s first public response came on Tuesday 29 September, eight days after the tip-off. It said no citizens’ personal information was compromised. On 30 September the Information Regulator told the Mail & Guardian it had not received a notification from the department. By 3 October the Gauteng Legislature’s e-Government Committee was saying the app was not safe to use and asking for a report on access logs going back to the app’s 2024 launch.