Microsoft 365 To Block Downloaded Excel XLL Add-Ins To Boost Security

Microsoft has recently announced that in order to help improve security, Microsoft 365 is now blocking the download of XLL add-ins for Excel on both Window PCs and Apple Macs. This new feature will be put into effect early 2021, affecting both Office 365 and Office 2019 commercial users. Office 365 users will receive the new security feature in the Microsoft 365 Apps for Enterprise and Office 2019 commercial users in Office Professional Plus, Visio Professional Plus, or Project Professional Plus. This feature is already available to Windows Insiders users and will roll out to all users shortly. This security block is an effort to protect users from malicious add-ins and protect their privacy. Microsoft wants to make sure that their users are only downloading Excel add-ins they can trust, protect their data, and prevent any possible malware from infiltrating their systems. The blocked add-ins will be part of the click-to-run deployment mechanism of Office 365 and Office 2019. When users attempt to download a blocked XLL add-in, they will receive an error prompting them to contact their system administrator for more information. The administrator will then be able to configure relevant trust settings. In doing so, Microsoft hopes to keep Office 365 and its users safe and secure. With the increasing dependencies on Office 365, Microsoft wants to make sure its users have the utmost protection. For commercial users, these XLL add-ins can be essential in their day-to-day work. Overall, Microsoft’s blocking of downloaded Excel XLL add-ins is an effective move in its goal to improve their security and protect Office 365 users. This new feature will help Microsoft protect its users and their data, ensuring that Office 365 remains safe and secure for everyone.

This Cyber News was published on www.bleepingcomputer.com. Publication date: Tue, 24 Jan 2023 16:27:02 +0000


Cyber News related to Microsoft 365 To Block Downloaded Excel XLL Add-Ins To Boost Security

Microsoft to End Malware Delivery In Excel XLL Add-ins - Microsoft has revealed plans to end the malicious use of Excel XLL add-ins, which have been used by some to deliver malware. XLL add-ins are files that can be used to add custom functions to Excel spreadsheets. Unfortunately, these add-ins have been ...
2 years ago Bleepingcomputer.com
Microsoft 365 To Block Downloaded Excel XLL Add-Ins To Boost Security - Microsoft has recently announced that in order to help improve security, Microsoft 365 is now blocking the download of XLL add-ins for Excel on both Window PCs and Apple Macs. This new feature will be put into effect early 2021, affecting both Office ...
2 years ago Bleepingcomputer.com
25 Best Managed Security Service Providers (MSSP) - 2025 - Pros & Cons: ProsConsStrong threat intelligence & expert SOCs.High pricing for SMBs.24/7 monitoring & rapid incident response.Complex UI and steep learning curve.Flexible, scalable, hybrid deployments.Limited visibility into endpoint ...
1 month ago Cybersecuritynews.com
CVE-2022-48826 - In the Linux kernel, the following vulnerability has been resolved: ...
7 months ago
Veeam adds BaaS capabilities for Veeam Backup for Microsoft 365 - Veeam Software has expanded its relationship with Microsoft. Veeam is making it easier for customers to protect Microsoft 365 with Cirrus by Veeam which brings the ease and flexibility of Backup-as-a-Service for Microsoft 365. Utilizing the power and ...
1 year ago Helpnetsecurity.com
New Microsoft Incident Response guides help security teams analyze suspicious activity - Today Microsoft Incident Response are proud to introduce two one-page guides to help security teams investigate suspicious activity in Microsoft 365 and Microsoft Entra. These guides contain the artifacts that Microsoft Incident Response hunts for ...
1 year ago Microsoft.com
Microsoft to disable Excel workbook links to blocked file types - As the company explained in a Microsoft 365 admin center message on Wednesday, Microsoft 365 will display a business bar warning of this upcoming change when opening workbooks containing external links to blocked file types, starting with Build 2509. ...
1 week ago Bleepingcomputer.com
Microsoft Incident Response lessons on preventing cloud identity compromise - Microsoft Incident Response is often engaged in cases where organizations have lost control of their Microsoft Entra ID tenant, due to a combination of misconfiguration, administrative oversight, exclusions to security policies, or insufficient ...
1 year ago Microsoft.com
​​Microsoft named as a Leader in three IDC MarketScapes for Modern Endpoint Security 2024 - With these security concerns top of mind, there is no surprise that in the last five years, the Modern Endpoint Security market has nearly tripled in size to defend against emerging, sophisticated, and persistent threats. Microsoft Defender for ...
1 year ago Techcommunity.microsoft.com
Microsoft blocks ActiveX by default in Microsoft 365, Office 2024 - Microsoft also warned Office users in a separate support document not to open unexpected file attachments or change ActiveX settings when prompted by random pop-ups and unknown people. Microsoft announced it will begin disabling all ActiveX controls ...
3 months ago Bleepingcomputer.com
Hackers Weaponize Microsoft Visual Studio Add-Ins to Push Malware - Security researchers have warned that hackers may start using Microsoft Visual Studio Tools for Office (VSTO) more often as a method to achieve persistence and execute code on a target machine via malicious Office add-ins. This technique is an ...
2 years ago Bleepingcomputer.com
$25M gone in 12 seconds! Brothers accused of Ethereum heist The Register - These transactions are grouped onto blocks that are chained together, hence the name. As the name suggests, validator bots attest that proposed blocks of Ethereum transactions are valid and send those blocks to a committee of fellow validators to ...
1 year ago Go.theregister.com
Microsoft: Office 2016 and Office 2019 reach end of support in October - You can also switch to Office 2024, a standalone Office version released in October 2024 for small businesses and consumers without a Microsoft 365 subscription. This version includes locked-in-time versions of Word, Excel, PowerPoint, ...
3 months ago Bleepingcomputer.com
Microsoft Security Copilot improves speed and efficiency for security and IT teams - First announced in March 2023, Microsoft Security Copilot-Microsoft's first generative AI security product-has sparked major interest. With the rapid innovations of Security Copilot, we have taken this solution beyond security operations use cases ...
1 year ago Microsoft.com
Microsoft deprecates Defender Application Guard for Office - Microsoft is deprecating Defender Application Guard for Office and the Windows Security Isolation APIs, and it recommends Defender for Endpoint attack surface reduction rules, Protected View, and Windows Defender Application Control as an ...
1 year ago Bleepingcomputer.com
CVE-2025-21631 - In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() Our syzkaller report a following UAF for v6.6: BUG: KASAN: slab-use-after-free in bfq_init_rq+0x175d/0x17a0 ...
6 months ago Tenable.com
Microsoft: Licensing issue blocks Microsoft 365 Family for some users - Microsoft is investigating a potential licensing issue blocking access to Microsoft 365 services for some customers with Family subscriptions. After a massive wave of user reports on social media and the company's community website, Microsoft ...
3 months ago Bleepingcomputer.com
Microsoft fixes Outlook Desktop crashes when sending emails - Microsoft has fixed a known issue causing Outlook Desktop clients to crash when sending emails from Outlook.com accounts. These problems were first reported on Microsoft's community website and other social networks by customers saying they were ...
1 year ago Bleepingcomputer.com
Microsoft Investigating Forms Service Issue Not Accessible for Users - Microsoft is currently investigating a significant service disruption affecting Microsoft Forms, leaving numerous users unable to access the popular online survey and quiz platform. The company stated, “We’re investigating an issue where ...
1 month ago Cybersecuritynews.com
Microsoft Eliminated High-Privilege Access to Enhance Microsoft 365 Security - The initiative also included implementing standardized monitoring systems to identify and report any remaining high-privilege access within Microsoft 365 applications, ensuring continuous compliance with the new security standards. Microsoft has ...
4 weeks ago Cybersecuritynews.com
Microsoft investigates outage affecting Microsoft 365 admin center - This is the second time this week that Remond has had to mitigate an issue blocking access to the Microsoft 365 admin center, with the company confirming another similar incident on Thursday, following customer reports of server errors when trying to ...
2 weeks ago Bleepingcomputer.com
"Microsoft’s Secure Future Initiative" Biggest cybersecurity Project in Its History - Led by Charlie Bell, Executive Vice President of Microsoft Security, the initiative has mobilized the equivalent of 34,000 engineers working full-time for 11 months to bolster security for Microsoft, its customers, and the broader industry. Following ...
3 months ago Cybersecuritynews.com
Microsoft 365 Admin Center Outage Blocks Access for Admins Worldwide - Microsoft acknowledged the problem via its service health status page, advising affected users to check for updates outside the inaccessible portal. Microsoft recommends using alternative URLs, like the Microsoft 365 admin center direct links or the ...
2 weeks ago Cybersecuritynews.com
CVE-2017-11877 - Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Compatibility Pack Service Pack 3, Microsoft Excel Viewer ...
1 year ago
Microsoft Office 2024 now available for Windows and macOS users - As announced earlier in September, starting in Office 2024, Microsoft will also turn off ActiveX controls by default in Word, Excel, PowerPoint, and Visio client apps, a measure likely prompted by ActiveX's well-known security issues. Last month, ...
10 months ago Bleepingcomputer.com