Log4j highlights ongoing cyber risk from free, open source software: Moody's