SCATTERED SPIDER MEMBERS JAILED FOR TFL HACK

AI DESK■ 1 MIN READ

THU, JUL 16, 2026

■ AI-SUMMARIZED FROM 2 SOURCES ▸ TIMELINE

Two members of the Scattered Spider cybercrime collective have been sentenced to five years and six months in prison each for a 2024 cyberattack that disrupted Transport for London.

The two men, who carried out the attack as teenagers, pleaded guilty in UK courts to their role in the August 2024 breach. The cyberattack significantly impacted TfL operations, affecting millions of commuters in London. Scattered Spider is a known cybercrime group operating internationally. The sentencing marks a significant enforcement action against the collective, which has been linked to multiple high-profile attacks on critical infrastructure and major organizations. The case highlights growing efforts by UK authorities to prosecute cybercriminals involved in attacks on essential services. Both defendants were given identical sentences, reflecting the severity of disrupting critical transport infrastructure that millions depend on daily. The sentences send a message that cyberattacks targeting public services carry substantial criminal penalties in the UK.

■ SOURCES

► Techmeme ► Bleeping Computer

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

P750RUSSIAN HACKERS WEAPONIZE WEBEX, ZOOM WITH STARLAND MALWARE

Russian threat actor UAT-11795 is distributing trojanized versions of popular video conferencing apps to deploy Starland, a new backdoor capable of stealing credentials and cryptocurrency.

2H AGO— Security Desk

P749SPIRALS RANSOMWARE ENCRYPTS NETWORKS IN UNDER 24 HOURS

A new ransomware group called Spirals has demonstrated rapid attack capabilities, completing full network encryption within a single day. The threat actor moved from initial access through data theft to encryption faster than most ransomware operations.

2H AGO— Security Desk

P747CISA ORDERS FEDS TO PATCH ORACLE FLAW BY SATURDAY

The Cybersecurity and Infrastructure Security Agency has issued an emergency directive requiring federal agencies to patch a critical Oracle E-Business Suite vulnerability by Saturday. The flaw is currently being exploited in active attacks.

2H AGO— Security Desk

P743XAI SUES GROK USER OVER SEXUALIZED DEEPFAKES

xAI has filed a lawsuit against a user who allegedly used Grok to generate nonconsensual sexualized images of both adults and children.

4H AGO— AI Desk

◄ BACK TO NEWS

SCATTERED SPIDER MEMBERS JAILED FOR TFL HACK

■ MORE FROM THE SECURITY DESK

■ SUBSCRIBE TO THE DAILY BRIEF