Microsoft Disabling Macros Is a Huge Win for Security
At least a quarter of ransomware attacks against businesses or other organizations start with phishing attempts, which often dangle a malicious document laced with tainted macros, according to Brett Callow, a threat analyst at the antivirus company Emsisoft.
“We are always working to improve security,” said a Microsoft spokesperson in a statement. “Our products currently provide a warning to all customers that requires them to click before running macros from the internet. This new feature goes even further with an extra step to protect customers in everyday scenarios.” The company declined to say specifically why it took the step now and had not done it sooner.
By disabling macros specifically in files obtained from the internet, Microsoft appears to be attempting a diplomatic solution. Windows marks files you download with a metadata attribute known as “Mark of the Web” or “zone.identifier.” These help the system do things like warn you when you're about to run software from the internet that may not be trustworthy.
“As a red teamer, I think this is a great move,” says independent researcher Cedric Owens. “Office macro abuse has had a long tail, and since there is rarely a valid use for Office files using macros, especially in files obtained from the internet, I'm glad to see Microsoft make this change.”
France Dernières Nouvelles, France Actualités
Similar News:Vous pouvez également lire des articles d'actualité similaires à celui-ci que nous avons collectés auprès d'autres sources d'information.
Jeremy Giambi, former Oakland Athletics player, has diedFormer Oakland A's slugger Jeremy Giambi has died, the team said Wednesday.
Lire la suite »
Former MLB player Jeremy Giambi found dead at age 47Jeremy Giambi played with the A's, Phillies, Red Sox and Royals in a six-year career.
Lire la suite »
Apple to release important AirTag updates to prevent unwanted trackingApple is taking the first serious steps toward improving AirTag's security features by releasing new software update to prevent unwanted tracking.
Lire la suite »
Team USA Women Beat ROC in Winter Olympics Curling OpenerThe U.S. women’s curling team is one step closer to an Olympic medal with a win over the Russian Olympic Committee at the 2022 Winter Olympics in Beijing.
Lire la suite »
Team USA Women Beat ROC in Winter Olympics Curling OpenerThe U.S. women’s curling team is one step closer to an Olympic medal with a win over the Russian Olympic Committee at the 2022 Winter Olympics in Beijing.
Lire la suite »
Senate passes bill that would ban forced arbitration in sexual misconduct cases | EngadgetGoogle, Facebook, Microsoft and other tech companies have ended the practice in recent years..
Lire la suite »