I am concerned that many adversaries will exploit the log4j vulnerability without our knowledge since we have not enacted my bipartisan cyber incident reporting legislation. I am very disappointed it was not included in the NDAA and will be working to get it passed ASAP.