Hackers used the Log4j flaw to gain access before moving across a company's network, say security researchers

State-backed hacking groups are some of the most advanced cyberattack operations in the world - but criminals don't need to rely on them if they can exploit unpatched cybersecurity flaws.