“This is things that you need to put in your WAF right away, that if you see a request containing these kinds of strings, block them.”

Transcript evidence from Guy Barhart-Magen -- Log4j and Incident Response.