According to a report released the Cyber Safety Review Board, “significant risk remains” with Log4j