{"id":10806,"date":"2022-02-08T01:19:09","date_gmt":"2022-02-08T01:19:09","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2022\/02\/08\/microsoft-office-will-start-blocking-downloaded-macros-by-default\/"},"modified":"2022-02-08T01:19:09","modified_gmt":"2022-02-08T01:19:09","slug":"microsoft-office-will-start-blocking-downloaded-macros-by-default","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2022\/02\/08\/microsoft-office-will-start-blocking-downloaded-macros-by-default\/","title":{"rendered":"Microsoft Office will start blocking downloaded macros by default"},"content":{"rendered":"

<\/a>\n<\/p>\n

\n

Why it matters:<\/strong> Microsoft Office files have long been a popular vector for malware. Now Microsoft is changing Office\u2019s default behavior in its latest attempt to make Office applications more secure. This change will apply to Office versions going back several years. <\/p>\n

In a blog post this week, Microsoft announced that it\u2019s adding an extra step in activating<\/a> macros in Office files downloaded from the internet. Instead of being activated with a single click, Office applications will now show users a warning message they\u2019ll have to get through first.<\/p>\n

The change applies to Windows versions of Access, Excel, PowerPoint, Visio, and Word. The update will come to Office 365 first, starting with the version 2203 preview in April. Later on, it will come to Office LTSC and standalone Office 2021, 2019, 2016, and 2013.<\/p>\n

\"\"<\/picture><\/p>\n

Macros are automated processes that users can build into Office files. Hackers have long used them to deliver malware payloads in files sent to victims. In September, Microsoft had to close<\/a> another large vulnerability in Office and other Microsoft products.<\/p>\n

Marcos previously had a notification warning users of their risks, but the new message has a more serious tone and a button that leads<\/a> to more information about risky macros. It even brings users through a checklist of questions highlighting typical social engineering behavior.<\/p>\n<\/p><\/div>\n