'Less obvious' uses of Log4j pose a major risk

This VentureBeat article from December 14, 2021, explains that Apache Log4j is often used unknowingly inside software products, making the Log4Shell vulnerability difficult to detect and fix. Casey Ellis, founder and chief technology officer at Bugcrowd, advises organizations to fix known exposures first while planning for unknown vulnerable Log4j in their environments.