Microsoft Office 365 gets protection against malicious XLM macros

[silversurfer]

Microsoft has added XLM macro protection for Microsoft 365 customers by expanding the runtime defense provided by Office 365's integration with Antimalware Scan Interface (AMSI) to include Excel 4.0 (XLM) macro scanning. [...]

"The recent AMSI instrumentation in XLM directly tackles the rise of malware campaigns that abuse this feature," Microsoft said.
"Because AMSI is an open interface, other antivirus solutions can leverage the same visibility to improve protections against threats."

Image: Microsoft​

"The visibility provided by AMSI leads to significant improvements in generic and resilient signatures that can stop waves of obfuscated and mutated variants of threats," Microsoft added.

Microsoft Office 365 gets protection against malicious XLM macros

Microsoft has added XLM macro protection for Microsoft 365 customers by expanding the runtime defense provided by Office 365's integration with Antimalware Scan Interface (AMSI) to include Excel 4.0 (XLM) macro scanning.

www.bleepingcomputer.com

 

[upnorth]

We are introducing a change to the Excel Trust Center Macro settings to provide a more secure experience for users by default. This new default behavior will disable Excel 4.0 macros.

Note: Users who have already configured this setting or have a group policy configuration in place will not be affected by this change.

Macro Settings Update to Disable Excel 4.0 Macros by Default - M365 Admin

We are introducing a change to the Excel Trust Center Macro settings to provide a more secure experience for users by default. This new default behavior will disable Excel 4.0 macros. Note: Users who have already configured this setting or have a group policy configuration in place will not be...

m365admin.handsontek.net

 

[silversurfer]

Microsoft will begin disabling Excel 4.0 macros in all tenants using this rollout schedule:

• Insiders-Slow: will rollout in late October and be complete in early November.
• Current Channel: will rollout in early November and be complete in mid-November.
• Monthly Enterprise Channel (MEC): will begin and complete rollout in mid-December.

Microsoft will not be making any changes for users who have manually configured this setting or configured it via group policies.

Microsoft is disabling Excel 4.0 macros by default to protect users

Microsoft will soon begin disabling Excel 4.0 XLM macros by default in Microsoft 365 tenants to protect customers from malicious documents.

www.bleepingcomputer.com