How can you not know ANYTHING about a vulnerability in the news for 3 months?

I interviewed a "senior" pentester today who works at a bank and asked "Tell me about a recent vulnerability in the news and how you would test your systems for it."

He fished around for a good minute trying to think of one. Then finally came up with "something 4shell". I said "Log4shell?" "Yeah, that one." "Cool, tell me about it."

He could not, fam.

I said "You work for a bank... and you haven't spent any time on this? …

cybersecurity in the news vulnerability