7-Year-Old 0-Day in Microsoft Office Exploited to Drop Cobalt Strike
https://www.hackread.com/microsoft-office-0-day-exploited-cobalt-strike/

'Microsoft Office vulnerability identified in 2017'
ms has know about this vulnerability for 7 fucking years and has not patched it in all that time. This is part of why I'm now using Linux for my OS.