A 17-year-old Excel vulnerability is currently being exploited by threat actors, and it’s been flagged by the US’ cyber defence agency
A Microsoft Excel vulnerability that has persisted for 17 years is now being actively exploited by threat actors, prompting action from US cybersecurity authorities. Originally discovered and filed in February 2009, the flaw has remained unpatched or unresolved throughout its existence, representing a significant long-term security risk in widely-used enterprise software. The vulnerability has recently caught the attention of the American Cybersecurity and Infrastructure Security Agency (CISA), which published a report this week documenting the active exploitation. The emergence of this threat highlights how legacy vulnerabilities can remain dangerous even as the cybersecurity landscape evolves, and underscores the importance of maintaining security updates and patches across commonly-used applications, particularly those integrated into critical business infrastructure.