Two young men have pleaded guilty to carrying out a major cyberattack on Transport for London in 2024, an intrusion that caused months of disruption, exposed the data of millions of customers, and resulted in tens of millions of pounds in losses.