Here's how hackers used the Log4j flaw to gain access before moving across a company's network

State-backed hacking groups are some of the most advanced cyberattack operations in the world - but criminals don't need to rely on them if they can exploit unpatched cybersecurity flaws.