There is also "Leaking Sensitive Information in Complex Document Files--and How to Prevent It" from IEEE Security & Privacy earlier this year. All copies might be behind paywalls, however.