As governments and internet gurus warn world over Log4j, called one of the most serious vulnerabilities ever, firm says Iran-backed APT35 tried to hit 7 Israeli targets