Log4J Attacks Confirm Need for DevSecOps, Automation, SBOM