The SANS Internet Storm Center published a diary entry on Wednesday, October 14th, revisiting the topic of VBA code stored inside AutoCAD drawing files (.dwg). The author notes that they wrote about this issue years ago, signaling that it remains relevant enough to warrant a fresh look.
The new entry focuses on "orphaned" VBA projects within DWG files. While the original diary entry is brief, the title and context suggest that these orphaned projects may persist in files even when the associated application or macro is no longer active, potentially creating a hidden attack surface.
Because the source provides limited detail, this article does not speculate on specific exploitation methods or mitigations. The key takeaway is that security practitioners should be aware that DWG files can carry embedded VBA code, and that even orphaned projects may deserve attention during analysis.