Microsoft rolls back blocking VBA macro scripts by default in Excel, PowerPoint, Access, Visio, and Word, “based on feedback” and “to make improvements”
While Microsoft announced earlier this year that it would block VBA macros on downloaded documents by default …
BleepingComputer Sergiu Gatlan
Related Coverage
- Microsoft Will Once Again Allow VBA Macros on Downloaded Documents by Default Metacurity · Cynthia Brumfield
- ‘A step in the wrong direction’: Microsoft reverses block on Office macros Tech Monitor · Matthew Gooding
- Microsoft rolls back blocking Office VBA macros by default The Verge · Tom Warren
- Helping users stay safe: Blocking internet macros by default in Office Microsoft Tech Community · Kellie Eickmeyer
- Microsoft rolls back a default macro block in Office ZDNet · Liam Tung
- Microsoft appears to reverse VBA macro-blocking ComputerWeekly.com · Alex Scroxton
- Microsoft strangely backtracks on decision to block Office macros by default Neowin · Usama Jawad
Discussion
-
@evacide
Eva
on x
This is a terrible idea. I've lost track of the number of campaigns I saw targeting civil society that used office macros to install malware. https://www.bleepingcomputer.com/ ...
-
@c_c_krebs
Chris Krebs
on x
The age old challenge of balancing usability & security. Directionally a good thing, but assume a ton of stuff broke w/ this move. MSFT should keep pushing. https://www.bleepingcomputer.com/ ...
-
@gossithedog
Kevin Beaumont
on x
The single most impactful change Microsoft could have made to radically improve a real world cybersecurity issue in their own back garden (that they directly profit from) was rolled back without even being communicated.
-
@marcoverip
Marc Smeets
on x
And just like that MSFT is rolling back arguably one of the most effective security measures they took in recent years: blocking macros on downloaded documents. https://www.bleepingcomputer.com/ ... https://twitter.com/...
-
@cyberoutsider
Dave
on x
And for anyone that thinks implementing security changes and getting cultural acceptance in an organisation is easy... here's even Microsoft having to backtrack https://www.bleepingcomputer.com/ ...
-
@cryptolaemus1
@cryptolaemus1
on x
🤬This is rather unfortunate & a step in the wrong direction. We saw threat actors/crimeware distro start to use LNKs/ISOs/ZIPs etc again as the primary foot in the door tells us that the macro defaults matter. Hopefully Microsoft can resolve the problems & still roll this out. ht…
-
@bleepincomputer
@bleepincomputer
on x
In response to our questions as to why they are rolling back this Office macro change, a spokesperson told us Microsoft “doesn't have anything more to share.”
-
@lawrenceabrams
Lawrence Abrams
on x
Malware devs and phishing actors rejoice! Microsoft should have kept it enabled and told users to send files in ISOs instead. https://twitter.com/...
-
@quinnypig
Corey Quinn
on x
When one large shitty company pays you enough to alter your product roadmap to the detriment of the rest of the world. https://twitter.com/...
-
@luke_metro
@luke_metro
on x
Congratulations to North Korea https://www.bleepingcomputer.com/ ...
-
@campuscodi
Catalin Cimpanu
on x
This is just dumb on a level I don't have words for https://twitter.com/...