From threatpost.com
Researchers warn XML macros embedded in SYLK files can sidestep Microsoft Office for Mac protections.
Microsoft Office for Mac users are being warned that malicious SYLK files are sneaking past endpoint defenses even when the “disable all macros without notification” is turned on. This leaves systems vulnerable to a remote, unauthenticated attackers who can execute arbitrary code.