From what I've read they merely have to update log4j and/or change a parameter.  Perhaps they will notify us when that is fixed?  Or not.  Keeping us informed on their operations isn't exactly something they do, until too many people speak up.  And I'm sorry if I hurt anyone's feelings, but most tax preparers are in the dark on this one!  Hopefully they have IT people in their organization keeping track of these things!