Hackers bypass patched Microsoft Office flaw to inject Formbook malware

Security researchers at Sophos have discovered a novel workaround exploit for a patched Microsoft Office flaw that allowed remote code execution via a mechanism in Microsoft Word files.

The now-patched critical vulnerability, tracked as CVE-2021-40444, involved exploiting the mechanism in a Word…