Spotted in the wild!
I run an MSP and we were alerted to this on the 3rd of October. Client was a 330 seat charity and I did not link it to this specific article until I read it this morning. They have zero-trust and Ringfencing (I won't mention the name of it for fear of shill accusations) so although the Macro ran, it didn't make it outside of Excel.
A subtle reminder to incorporate a ZT solution in critical environments as it can stop zero-day stuff like this folks!