Microsoft resumes rolling out an update to block VBA macros by default in downloaded Office documents, after rolling it back earlier in July over user feedback
Sergiu Gatlan / BleepingComputer :
Context & Ripple Effects
Microsoft first began making Office block downloaded VBA macros by default after years of calls from security experts; that move followed a history of Word flaws being used in large-scale email malware campaigns. The July rollback, framed as a response to feedback and a need for improvements, interrupted that rollout before Microsoft restored it.
First-order effects
- Office users opening downloaded documents containing VBA macros now encounter a default block again, while Microsoft reinstates the security posture it introduced in February.
Second-order effects
- The quick July rollback and resumption put Microsoft’s Office deployment process under pressure to accommodate users dependent on macros without abandoning the default protection security experts had sought.
Third-order effects
- If Microsoft maintains the restored setting, Office security will rely more on restrictive defaults for downloaded content, shifting exceptions and compatibility work to organizations that still use macro-enabled documents.
The trend: Microsoft’s Office policy is moving toward safer defaults for commonly abused document features, even when rollout feedback requires implementation changes.