Two leading Scattered Spider members, Thaila Jubar and Owen Flowers, were sentenced to five years and six months for the 2024 Transport for London hack that knocked 148 systems offline, forced 27,000 password resets, stole customer data, and cost TfL £29 million, with wider losses estimated far higher; U.S. charges against Dubar remain unproven. Investigators also believe Russian hackers were behind last year&#x27;s crippling Jaguar Land Rover attack that halted production for months and contributed to a £1.5 billion bailout, with Microsoft and multiple agencies assisting. OpenAI unveiled GPT-Red, an automated red-teaming AI for prompt injection, alongside a NIST-backed argument that finite guardrails can&#x27;t be universally robust. The episode also covers ClickLock, a macOS stealer that kills apps until a password is entered, and Recorded Future&#x27;s report on Iran-linked groups using ChatGPT for malware, phishing, and reconnaissance. 00:00 Headlines Kickoff 01:08 Scattered Spider Sentencing 02:57 US Charges Loom 03:29 Jaguar Land Rover Hack 04:35 GPT-Red AI Red Team 05:40 Why Guardrails Fail 06:36 ClickLock Mac Stealer 06:53 How ClickLock Spreads 07:59 Defense and Cleanup Tips 08:37 Iran Uses AI for Ops 10:30 Wrap Up and Next Show

Scattered Spiders sentenced, OpenAI builds an AI that breaks AIs, and Iran leans on ChatGPT

Cybersecurity Today

Cybersecurity Today is brought to you by NordLayer. Teams today work across multiple tools and devices, but security often remains fragmented, and this is exactly what NordLayer can help you address. NordLayer gives your company centralized control over access by individuals and teams, and keeps connection secure from anywhere, with no additional hardware required.

Visit NordLayer.com slash cybersecurity today, and use the discount code NLSUMMER26 for a special discount on your purchase. Two more Scattered Spiders members are heading to prison. Russia likely behind the Jaguar Land Rover attack. An AI whose only job is to break other AIs. A new Mac info stealer kills your apps until you hand over your password.

And Iran link groups are putting ChatGPT to work on malware and reconnaissance. This is Cybersecurity Today, and I'm your host, David Shipley. Let's get started. Two of the leading figures in the Scattered Spiders cybercrime group are headed to prison over the 2024 hack of Transport for London.

Diala Jubar, now 20, and Owen Flowers, 18, were each sentenced today to five years and six months. Both pled guilty last month under the UK's Computer Misuse Act. The cyberattack hit in August 2024 and disrupted an agency that moves more than 8.4 million people a day. Dial-A-Ride went down.

So did concessionary travel cards, digital payments, refunds, and the contactless ticketing rollout. In all, 148 systems were knocked offline, and every one of TFL's 27,000 employees had to reset their passwords in person. TFL put its direct losses and recovery costs at a staggering 29 million British pounds.

Scattered Spiders sentenced, OpenAI builds an AI that breaks AIs, and Iran leans on ChatGPT

Read the full transcript

The candid version is on a podcast,
not the earnings call.

Scattered Spiders sentenced, OpenAI builds an AI that breaks AIs, and Iran leans on ChatGPT

Read the full transcript

The candid version is on a podcast, not the earnings call.

The candid version is on a podcast,
not the earnings call.