Microsoft Office DDE zero-day enables attacks without using macros.