NCSC's guidance can be found here;

Malicious macros are still causing problems!
Andrew A explains the updated guidance for Microsoft Office macros