Microsoft Office 2024 to disable ActiveX controls by default
ID: ba055958-98a0-5c83-8ed4-802c738033c7
STIX ID: report--ba055958-98a0-5c83-8ed4-802c738033c7
Feed Name: Bleeping Computer
Microsoft will disable ActiveX controls by default in Office 2024 (October 2024) and Microsoft 365 apps (April 2025), blocking creation and interaction with ActiveX in documents by default; administrators and users can revert via Trust Center, registry, or Group Policy. This security hardening responds to long-running abuse of ActiveX and related Office features by attackers (e.g., TrickBot, Cobalt Strike, Andariel) and aligns with prior measures such as AMSI integration, disabling Excel 4.0 (XLM) macros, blocking VBA macros and untrusted XLL add-ins, and deprecating VBScript.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.