Plan
active
LibreOffice/OpenOffice PoC: Spreadsheets Execute Code, No Macro Warning
- Engineer — Plan: If your environment runs LibreOffice or OpenOffice with Java support enabled, audit those deployments and disable Java as a mitigation now; monitor for a vendor patch and apply it promptly when released. No active exploitation yet, but the attack surface (malicious file opened by a user) is realistic.
- SOC/IR — Learn: No active exploitation or published IOCs yet, so there is nothing actionable to hunt; worth tracking in case threat actors weaponize this for phishing lure campaigns delivering malicious spreadsheets.
- Leader — Skip
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.