Log4j Forever Changed What (Some) Cyber Pros Think About OSS

The problem isn’t software vulnerability alone. It’s also not knowing if you have vulnerable code hiding in your applications. Surprisingly, many security and IT professionals have no idea whether Log4j is part of their software supply chain.