Within an hour of the Log4shell bug becoming public, I was able to inform our team and figure out how it impacted us. Yes we do have subscriptions to alerts from security services whose job it is to track this kind of thing but feeling like I can keep on top of the most critical security issues along with them feels quite valuable.