Not patched Log4j yet? Assume attackers are in your network, say CISA and FBI

Almost a year on from Log4j’s disclosure, a joint alert by CISA and the FBI warns organizations that if they haven’t protected their systems against it yet, they really need to now.