TL;DR A recently circulated Log4j finding demonstrates a reproducible bypass of a defense-in-depth deserialization control ...