Scattered Spiders sentenced, OpenAI builds an AI that breaks AIs, and Iran leans on ChatGPT

Two leading Scattered Spider members, Thaila Jubar and Owen Flowers, were sentenced to five years and six months for the 2024 Transport for London hack that knocked 148 systems offline, forced 27,000 password resets, stole customer data, and cost TfL £29 million, with wider losses estimated far higher; U.S. charges against Dubar remain unproven.

Investigators also believe Russian hackers were behind last year's crippling Jaguar Land Rover attack that halted production for months and contributed to a £1.5 billion bailout, with Microsoft and multiple agencies assisting. 

OpenAI unveiled GPT-Red, an automated red-teaming AI for prompt injection, alongside a NIST-backed argument that finite guardrails can't be universally robust.

The episode also covers ClickLock, a macOS stealer that kills apps until a password is entered, and Recorded Future's report on Iran-linked groups using ChatGPT for malware, phishing, and reconnaissance.

00:00 Headlines Kickoff
01:08 Scattered Spider Sentencing
02:57 US Charges Loom
03:29 Jaguar Land Rover Hack
04:35 GPT-Red AI Red Team
05:40 Why Guardrails Fail
06:36 ClickLock Mac Stealer
06:53 How ClickLock Spreads
07:59 Defense and Cleanup Tips
08:37 Iran Uses AI for Ops
10:30 Wrap Up and Next Show