“Our recommendation at the time was focus more on mitigations, detections, because fixes will only come in at a later time.”

Transcript evidence from Guy Barhart-Magen -- Log4j and Incident Response.