Many cos yet to scan systems or apply patches for Log4Shell