Transport for London (TfL) says it is making progress in recovering from a cyber attack that has damaged some of its IT systems, but it is still unable to renew expiring concession cards.