Vulnerability Intelligence Roundup: Five lessons learned since Log4Shell

This Vulnerability Intelligence roundup reviews lessons learned since the disclosure of Log4Shell (CVE-2021-44228), noting that the vulnerability and similar high-profile incidents (e.g., the SolarWinds supply-chain compromise attributed to APT29) continue to be actively exploited. The author emphasizes the critical importance of asset visibility, comprehensive logging/monitoring, and maintaining a software bill of materials (SBOM) to prioritize remediation and reduce risk from opportunistic attackers.