The US cybersecurity agency warns of observed attacks on an ancient Excel vulnerability. SharePoint is also being attacked.