Cloudflare and Cisco Talos say Log4j zero-day attacks were first observed