log4j was indeed the last time the internet storm center went to threat level yellow (as it is today again)