Threat Intelligence Roundup: Five Lessons Learned Since Log4Shell

**Executive summary:** This post reviews the impact and lessons learned from Log4Shell (CVE-2021-44228) and earlier supply-chain incidents (e.g., SolarWinds/APT29), emphasizing the ongoing exploitation risk and recommending stronger asset visibility, software bills of materials, digital risk protection, systematic support for open-source projects, and clearer organizational expectations and processes for vulnerability response.