The one book on cyber that I thoroughly enjoyed reading this year was "No Shortcuts: Why States Struggle to Develop a Military Cyber-Force" by @maxWSmeets It made me reconsider some of the ideas I had about how state actors operate and the different constrictions affecting their capabilities. The chapter on how state and non-state actors interact, the preconceptions vs reality of exploit market, was also enlightening. It's written in a very approachable way, so if anybody is looking for an interesting book on the subject I can certainly recommend getting it.

https://www.hurstpublishers.com/book/no-shortcuts/