Microsoft wants to block VBA markos by default
Macros in Microsoft Office are still a gateway for malware. To prevent users from accidentally clicking on a button to execute macros, Microsoft is testing a new warning feature for Office 365 users.
In light of many waves of threats that continue to exploit entry points in Microsoft Office documents, Microsoft now plans to disable VBA (Visual Basic for Applications) macros by default in the future.
Office users and administrators will then no longer run the risk of a Trojan sneaking in with Office files from the Internet. The execution of macros via a button can lead to data loss or remote access if a Trojan is introduced.
To prevent users from clicking the button to run macros by default in the future, a banner will pop up pointing to the security risks and a Microsoft support page.
According to "The Verge" Microsoft plans to implement the changes starting in April. From then on, the warning method will be tested in current-channel previews before being rolled out to regular Office 365 users. Affected by the change to block VBA macros from the web is Access, Excel, Power Point, Visio and Word on the Windows operating system.
Source: Heise.de
