A hole in Microsoft Office is being exploited by bad actors, including Russian hackers targeting Ukraine's government.