The NCSC is advising organisations to take steps to mitigate the Apache Log4j vulnerability

Read here: https://www.ncsc.gov.uk/news/apache-log4j-vulnerability