Attackers using a Word zero-day to spread malware

From Sophos:

Attackers using a Word zero-day to spread malware

"Attackers are using a previously undisclosed security hole in Microsoft Word to install a variety of malware on victims’ computers. Microsoft knows about the zero-day and is expected to patch it later today. As we await that security update, here’s a review of the bug and the available defenses."