The techniques fall under social engineering, not exploitable flaws. Because of this, no CVE or security patch is planned at this time. Microsoft ...
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
