CISA orders US federal civilian agencies to patch systems affected by the Log4j vulnerability by December 24 (Catalin Cimpanu/The Record)