https://www.bleepingcomputer.com/news/security/hackers-are-taking-over-ceo-accounts-with-rogue-oauth-apps/

https://blog.f-secure.com/insight-from-a-large-scale-phishing-study/

https://www.darkreading.com/attacks-breaches/log4j-proved-public-disclosure-still-helps-attackers

https://www.csoonline.com/article/3647756/how-to-prioritize-and-remediate-vulnerabilities-in-the-wake-of-log4j-and-microsofts-patch-tuesday-b.html