According to internet infrastructure provider Cloudflare, Log4j exploits started on December 1. Since then, warnings have been issued by several national cybersecurity agencies, including the Cybersecurity and Infrastructure Security Agency (CISA), the UK's National Cyber Security Centre (NCSC) and Germany's federal cyber security watchdog, the BSI.