Microsoft: Now We're Switching Off Excel 4.0 Macros by Default
upstart writes:
Microsoft: Now we're switching off Excel 4.0 macros by default:
Microsoft has disabled Excel 4.0 macros by default in the latest release of its spreadsheet software to help customers protect themselves against related security threats.
That setting, released as an optional configuration in Excel Trust Center setting in July, is now the default when opening Excel 4.0 macros (XLM), Microsoft said in a blogpost.
[...] The move to restrict Excel 4.0 macros is an attempt to counter a rise in ransomware and other malware groups using Excel 4.0 macros as part of an initial infection. State-sponsored and cybercriminal attackers started experimenting with legacy Excel 4.0 macros in response to Microsoft in 2018 cracking down on macro scripts written in Visual Basic for Applications (VBA).
The initial Excel Trust Center settings targeted organizations that wanted VBA and legacy macros to run via the setting "Enable Excel 4.0 macros when VBA macros are enabled". This allowed admins to control the behavior of macros without impacting VBA macros.
Macros are now disabled by default in Excel in build 16.0.14427.10000 and later. Admins can still configure the setting in Microsoft 365 applications policy control.
Read more of this story at SoylentNews.