{"id":7642,"date":"2022-07-14T10:12:42","date_gmt":"2022-07-14T08:12:42","guid":{"rendered":"https:\/\/www.retarus.com\/blog\/en\/why-office-macros-are-no-longer-automatically-blocked-by-microsoft-and-what-you-can-do-about-it"},"modified":"2024-05-07T19:19:43","modified_gmt":"2024-05-07T17:19:43","slug":"why-office-macros-are-no-longer-automaticall-blocked-by-microsoft-and-what-you-can-do-about-it","status":"publish","type":"post","link":"https:\/\/www.retarus.com\/blog\/en\/why-office-macros-are-no-longer-automaticall-blocked-by-microsoft-and-what-you-can-do-about-it\/","title":{"rendered":"Why Office macros are no longer automatically blocked by Microsoft and what you can do about it"},"content":{"rendered":"\n<p>MS Office documents armed with malicious macros and sent by email still rank among the tools most commonly employed in ransomware attacks. And the \u201csuccess\u201d they achieve proves the point, no matter whether the message purports to be an unpaid invoice or financial results that urgently need checking. In the heat of daily business, users are only too eager to quickly click on the attached documents.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-a-potential-security-risk-office-macros-no-longer-blocked-by-default\"><strong>A potential security risk: Office macros no longer blocked by default<\/strong><\/h2>\n\n\n\n<p>Microsoft itself is also thoroughly aware of the threat. At the beginning of the year, <a href=\"https:\/\/www.theverge.com\/2022\/2\/7\/22922032\/microsoft-block-office-vba-macros-default-change\" target=\"_blank\" rel=\"noreferrer noopener\">the software giant<\/a> announced the default blocking of macros for files downloaded from the internet. Now the company has made a U-turn and at the beginning of July, Microsoft was declaring on its official support portal: \u201cBased on feedback, we&#8217;re rolling back this change from Current Channel. We appreciate the feedback we\u2019ve received so far, and we\u2019re working to make improvements in this experience.\u201d Microsoft also announced its intention to continue developing the function, although the page refrained from mentioning a fixed time schedule for making it available again. To add some context to the current measures taken by Microsoft, many IT media channels suspect that there may have been issues with the implementation. According to <a href=\"https:\/\/www.heise.de\/news\/Microsoft-rudert-beim-Makroschutz-fuer-Office-Nutzer-zurueck-7166085.html?wt_mc=nl.red.security.security-nl.2022-07-11.link.link\" target=\"_blank\" rel=\"noreferrer noopener\">a test performed by the experts at German tech news outlet <em>Heise Security<\/em><\/a> for instance, in many cases only the regular yellow alert message still appeared. These can simply be clicked away, as many users will know, giving attackers an open path into the company\u2019s network.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-sandboxing-and-machine-learning-detailed-analysis-of-office-files-boosts-detection-rates\"><strong>Sandboxing and Machine Learning: Detailed analysis of office files boosts detection rates<\/strong><\/h2>\n\n\n\n<p>To provide the best possible protection against these and other similar macro viruses concealed in documents, Retarus crucially advises using a <a href=\"https:\/\/www.retarus.com\/services\/email-security\/sandboxing\/\">sandboxing solution<\/a>. In combatting these malware variants and other similarly adaptive threats, machine learning is gaining in importance and should be an essential component in any IT security strategy. State-of-the-art machine learning models are able to detect changes or tampering in executable files especially well \u2013 a big weak point in traditional signature-based approaches, which far too often play into the hands of the attackers in scenarios such as those described above. With a sandboxing approach, suspect contents are executed in a secure environment within the Retarus infrastructure, where they are examined thoroughly. In this fully automated process, the focus is often on the file formats exploited for attacks, such as Microsoft Office documents. Emails identified as infected are then deleted or immediately placed in quarantine. Incidentally, the sandboxing technology is run exclusively in Retarus\u2019 own Europe-based data centers \u2013 without transferring any sensitive data to third-party providers.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Post Delivery Protection solutions mitigate risks further<\/strong><\/h2>\n\n\n\n<p>To complement the sandboxing approach, Retarus additionally offers a valuable <a href=\"https:\/\/www.retarus.com\/services\/email-security\/post-delivery-protection\/\" target=\"_blank\" rel=\"noreferrer noopener\">Post Delivery Protection<\/a> mechanism with its Patient Zero Detection<sup>\u00ae<\/sup> (PZD). This patented technology allows malicious emails to be found and rendered harmless even after they have been delivered to an inbox. In the best case, this happens before the recipient has even had a chance to open the message or potentially open the harmful attachment. In fact, the majority of PZD findings are already identified within minutes of the initial inbox placement. With around half a million new virus variants every day, this can provide a crucial advantage in minimizing the risk of falling victim to a cyberattack.<\/p>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Microsoft actually intended to block all macros by default from the beginning of this year. Now the company has made a sudden U-turn. This is how you can protect your users all the same. <\/p>\n","protected":false},"author":12,"featured_media":9991,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","_s2mail":"yes","footnotes":""},"categories":[15],"tags":[102,3726],"dipi_cpt_category":[],"class_list":["post-7642","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-email-security","tag-microsoft-office"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v24.1 (Yoast SEO v24.1) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Why Office macros are no longer automatically blocked by Microsoft and what you can do about it - Retarus Corporate Blog - EN<\/title>\n<meta name=\"description\" content=\"Eigentlich wollte Microsoft seit Anfang des Jahres alle Makros standardm\u00e4\u00dfig blockieren. Jetzt folgt die Kehrtwende. Wie Sie Ihre Nutzer dennoch sch\u00fctzen.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.retarus.com\/blog\/en\/why-office-macros-are-no-longer-automaticall-blocked-by-microsoft-and-what-you-can-do-about-it\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Why Office macros are no longer automatically blocked by Microsoft and what you can do about it\" \/>\n<meta property=\"og:description\" content=\"Eigentlich wollte Microsoft seit Anfang des Jahres alle Makros standardm\u00e4\u00dfig blockieren. Jetzt folgt die Kehrtwende. Wie Sie sich und Ihre Nutzer dennoch sch\u00fctzen.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.retarus.com\/blog\/en\/why-office-macros-are-no-longer-automaticall-blocked-by-microsoft-and-what-you-can-do-about-it\/\" \/>\n<meta property=\"og:site_name\" content=\"Retarus Corporate Blog - EN\" \/>\n<meta property=\"article:published_time\" content=\"2022-07-14T08:12:42+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-05-07T17:19:43+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.retarus.com\/blog\/en\/wp-content\/uploads\/sites\/22\/2024\/05\/retarus-office.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"960\" \/>\n\t<meta property=\"og:image:height\" content=\"540\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"S\u00f6ren Schulte\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"Warum Office-Makros nicht mehr automatisch von Microsoft blockiert\" \/>\n<meta name=\"twitter:description\" content=\"Wie Sie sich und Ihre Nutzer dennoch sch\u00fctzen.\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"S\u00f6ren Schulte\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.retarus.com\/blog\/en\/why-office-macros-are-no-longer-automaticall-blocked-by-microsoft-and-what-you-can-do-about-it\/\",\"url\":\"https:\/\/www.retarus.com\/blog\/en\/why-office-macros-are-no-longer-automaticall-blocked-by-microsoft-and-what-you-can-do-about-it\/\",\"name\":\"Why Office macros are no longer automatically blocked by Microsoft and what you can do about it - Retarus Corporate Blog - EN\",\"isPartOf\":{\"@id\":\"https:\/\/www.retarus.com\/blog\/en\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.retarus.com\/blog\/en\/why-office-macros-are-no-longer-automaticall-blocked-by-microsoft-and-what-you-can-do-about-it\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.retarus.com\/blog\/en\/why-office-macros-are-no-longer-automaticall-blocked-by-microsoft-and-what-you-can-do-about-it\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.retarus.com\/blog\/en\/wp-content\/uploads\/sites\/22\/2024\/05\/retarus-office.jpg\",\"datePublished\":\"2022-07-14T08:12:42+00:00\",\"dateModified\":\"2024-05-07T17:19:43+00:00\",\"author\":{\"@id\":\"https:\/\/www.retarus.com\/blog\/en\/#\/schema\/person\/da5eb37e5936738ea4e12be8b429433d\"},\"description\":\"Eigentlich wollte Microsoft seit Anfang des Jahres alle Makros standardm\u00e4\u00dfig blockieren. Jetzt folgt die Kehrtwende. Wie Sie Ihre Nutzer dennoch sch\u00fctzen.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.retarus.com\/blog\/en\/why-office-macros-are-no-longer-automaticall-blocked-by-microsoft-and-what-you-can-do-about-it\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.retarus.com\/blog\/en\/why-office-macros-are-no-longer-automaticall-blocked-by-microsoft-and-what-you-can-do-about-it\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.retarus.com\/blog\/en\/why-office-macros-are-no-longer-automaticall-blocked-by-microsoft-and-what-you-can-do-about-it\/#primaryimage\",\"url\":\"https:\/\/www.retarus.com\/blog\/en\/wp-content\/uploads\/sites\/22\/2024\/05\/retarus-office.jpg\",\"contentUrl\":\"https:\/\/www.retarus.com\/blog\/en\/wp-content\/uploads\/sites\/22\/2024\/05\/retarus-office.jpg\",\"width\":960,\"height\":540},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.retarus.com\/blog\/en\/why-office-macros-are-no-longer-automaticall-blocked-by-microsoft-and-what-you-can-do-about-it\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.retarus.com\/blog\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Why Office macros are no longer automatically blocked by Microsoft and what you can do about it\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.retarus.com\/blog\/en\/#website\",\"url\":\"https:\/\/www.retarus.com\/blog\/en\/\",\"name\":\"Retarus Corporate Blog - EN\",\"description\":\"Always up to date\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.retarus.com\/blog\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.retarus.com\/blog\/en\/#\/schema\/person\/da5eb37e5936738ea4e12be8b429433d\",\"name\":\"S\u00f6ren Schulte\",\"url\":\"https:\/\/www.retarus.com\/blog\/en\/author\/sschulte\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Why Office macros are no longer automatically blocked by Microsoft and what you can do about it - Retarus Corporate Blog - EN","description":"Eigentlich wollte Microsoft seit Anfang des Jahres alle Makros standardm\u00e4\u00dfig blockieren. Jetzt folgt die Kehrtwende. Wie Sie Ihre Nutzer dennoch sch\u00fctzen.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.retarus.com\/blog\/en\/why-office-macros-are-no-longer-automaticall-blocked-by-microsoft-and-what-you-can-do-about-it\/","og_locale":"en_US","og_type":"article","og_title":"Why Office macros are no longer automatically blocked by Microsoft and what you can do about it","og_description":"Eigentlich wollte Microsoft seit Anfang des Jahres alle Makros standardm\u00e4\u00dfig blockieren. Jetzt folgt die Kehrtwende. Wie Sie sich und Ihre Nutzer dennoch sch\u00fctzen.","og_url":"https:\/\/www.retarus.com\/blog\/en\/why-office-macros-are-no-longer-automaticall-blocked-by-microsoft-and-what-you-can-do-about-it\/","og_site_name":"Retarus Corporate Blog - EN","article_published_time":"2022-07-14T08:12:42+00:00","article_modified_time":"2024-05-07T17:19:43+00:00","og_image":[{"width":960,"height":540,"url":"https:\/\/www.retarus.com\/blog\/en\/wp-content\/uploads\/sites\/22\/2024\/05\/retarus-office.jpg","type":"image\/jpeg"}],"author":"S\u00f6ren Schulte","twitter_card":"summary_large_image","twitter_title":"Warum Office-Makros nicht mehr automatisch von Microsoft blockiert","twitter_description":"Wie Sie sich und Ihre Nutzer dennoch sch\u00fctzen.","twitter_misc":{"Written by":"S\u00f6ren Schulte","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.retarus.com\/blog\/en\/why-office-macros-are-no-longer-automaticall-blocked-by-microsoft-and-what-you-can-do-about-it\/","url":"https:\/\/www.retarus.com\/blog\/en\/why-office-macros-are-no-longer-automaticall-blocked-by-microsoft-and-what-you-can-do-about-it\/","name":"Why Office macros are no longer automatically blocked by Microsoft and what you can do about it - Retarus Corporate Blog - EN","isPartOf":{"@id":"https:\/\/www.retarus.com\/blog\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.retarus.com\/blog\/en\/why-office-macros-are-no-longer-automaticall-blocked-by-microsoft-and-what-you-can-do-about-it\/#primaryimage"},"image":{"@id":"https:\/\/www.retarus.com\/blog\/en\/why-office-macros-are-no-longer-automaticall-blocked-by-microsoft-and-what-you-can-do-about-it\/#primaryimage"},"thumbnailUrl":"https:\/\/www.retarus.com\/blog\/en\/wp-content\/uploads\/sites\/22\/2024\/05\/retarus-office.jpg","datePublished":"2022-07-14T08:12:42+00:00","dateModified":"2024-05-07T17:19:43+00:00","author":{"@id":"https:\/\/www.retarus.com\/blog\/en\/#\/schema\/person\/da5eb37e5936738ea4e12be8b429433d"},"description":"Eigentlich wollte Microsoft seit Anfang des Jahres alle Makros standardm\u00e4\u00dfig blockieren. Jetzt folgt die Kehrtwende. Wie Sie Ihre Nutzer dennoch sch\u00fctzen.","breadcrumb":{"@id":"https:\/\/www.retarus.com\/blog\/en\/why-office-macros-are-no-longer-automaticall-blocked-by-microsoft-and-what-you-can-do-about-it\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.retarus.com\/blog\/en\/why-office-macros-are-no-longer-automaticall-blocked-by-microsoft-and-what-you-can-do-about-it\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.retarus.com\/blog\/en\/why-office-macros-are-no-longer-automaticall-blocked-by-microsoft-and-what-you-can-do-about-it\/#primaryimage","url":"https:\/\/www.retarus.com\/blog\/en\/wp-content\/uploads\/sites\/22\/2024\/05\/retarus-office.jpg","contentUrl":"https:\/\/www.retarus.com\/blog\/en\/wp-content\/uploads\/sites\/22\/2024\/05\/retarus-office.jpg","width":960,"height":540},{"@type":"BreadcrumbList","@id":"https:\/\/www.retarus.com\/blog\/en\/why-office-macros-are-no-longer-automaticall-blocked-by-microsoft-and-what-you-can-do-about-it\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.retarus.com\/blog\/en\/"},{"@type":"ListItem","position":2,"name":"Why Office macros are no longer automatically blocked by Microsoft and what you can do about it"}]},{"@type":"WebSite","@id":"https:\/\/www.retarus.com\/blog\/en\/#website","url":"https:\/\/www.retarus.com\/blog\/en\/","name":"Retarus Corporate Blog - EN","description":"Always up to date","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.retarus.com\/blog\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.retarus.com\/blog\/en\/#\/schema\/person\/da5eb37e5936738ea4e12be8b429433d","name":"S\u00f6ren Schulte","url":"https:\/\/www.retarus.com\/blog\/en\/author\/sschulte\/"}]}},"_links":{"self":[{"href":"https:\/\/www.retarus.com\/blog\/en\/wp-json\/wp\/v2\/posts\/7642"}],"collection":[{"href":"https:\/\/www.retarus.com\/blog\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.retarus.com\/blog\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.retarus.com\/blog\/en\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/www.retarus.com\/blog\/en\/wp-json\/wp\/v2\/comments?post=7642"}],"version-history":[{"count":12,"href":"https:\/\/www.retarus.com\/blog\/en\/wp-json\/wp\/v2\/posts\/7642\/revisions"}],"predecessor-version":[{"id":10428,"href":"https:\/\/www.retarus.com\/blog\/en\/wp-json\/wp\/v2\/posts\/7642\/revisions\/10428"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.retarus.com\/blog\/en\/wp-json\/wp\/v2\/media\/9991"}],"wp:attachment":[{"href":"https:\/\/www.retarus.com\/blog\/en\/wp-json\/wp\/v2\/media?parent=7642"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.retarus.com\/blog\/en\/wp-json\/wp\/v2\/categories?post=7642"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.retarus.com\/blog\/en\/wp-json\/wp\/v2\/tags?post=7642"},{"taxonomy":"dipi_cpt_category","embeddable":true,"href":"https:\/\/www.retarus.com\/blog\/en\/wp-json\/wp\/v2\/dipi_cpt_category?post=7642"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}