Microsoft Plans To Block Office VBA Macros By Default

Microsoft has announced its plan to block Visual Basic for Applications (VBA) macros by default in a variety of Office apps.

According to Microsoft, the change will apply to Office files that are downloaded from the internet and include macros, so Office users will no longer be able to enable certain content with a simple click of a button.

Principal PM at Microsoft, Kellie Eickmeyer explained that the new change is more secured and is expected to keep users safer.

“The default is more secure and is expected to keep more users safe including home users and information workers in managed organisations.”

Microsoft is planning to preview the change with its Current Channel (Preview) users in early April, before rolling out to its regular Microsoft 365 customers. The change to block VBA macros from the web will affect Access, Excel, PowerPoint, Visio, and Word on Windows. Microsoft also plans to update Office LTSC, Office 2021, Office 2019, Office 2016, and even Office 2013 to block internet VBA macros.

The new change is expected to impact a lot of genuine use cases for VBA macros, and it means that Office users will only be able to enable the macros by specifically ticking an unblock option on the properties of a file. That’s a lot more steps than usual, and ones that Microsoft is hoping will help prevent security issues in the future.

Security researcher and former Microsoft employee, Kevin Beaumont explains that “Macros account for about 25 percent of all ransomware entry,”

“Keep derisking macros and macro functions. It’s really important. Thank you all the people behind the scenes doing this.” Marcus Hutchins, a security

“Macros account for about 25 percent of all ransomware entry," Beaumont concluded.