Log4j remains vulnerable when using attacker-controlled thread context lookups | Heykuki News