Cloudflare says attackers are writing more sophisticated and obfuscated strings to bypass WAFs and exploit Log4j 2. Also, it only took nine minutes after the flaw was disclosed on Dec. 9 to see an exploitation attempt: https://t.co/gLuCQyF0R4