Hackers Exploit Vulnerabilities in Microsoft Word & Excel

Three old CVEs in Microsoft Word and Excel (CVE-2017-0199, CVE-2017-11882, CVE-2018-0802, score 7.8) continue to pose cybersecurity threats, despite not being zero-day or one-day vulnerabilities. Maldocs use tricks to disguise intent and lure victims into clicking and cause the subsequent malware to spread. Over 13,000 samples were discovered in 2023. Targeted industries include banking, finance, government, and healthcare. If you haven’t already, update now!