ACSC outlines Office macro security measures
The Australian Cyber Security Centre (ACSC) has updated its online Microsoft Office Macro Security document, outlining steps that can be taken to keep systems secure from malicious macros.
According to the ACSC, “An increasing number of attempts to compromise organisations using malicious macros have been observed. In particular, adversaries have been observed using social engineering techniques to entice users into executing malicious macros in Microsoft Office files. The purpose of these malicious macros can range from cybercrime to more sophisticated exploitation attempts.
“By understanding the business requirements for the use of macros, and applying the recommendations in this document, organisations can effectively manage the risk of allowing macros in their environments.”
The document explains Microsoft Office macros and their use, and details ways in which different versions of Office can be made more secure via changing policy settings and other approaches.
The ACSC website also provides lots of information on other methods for hardening various versions Office, as well as Windows and other software, including advice for users of the now-unsupported Windows 7.
LockBit named nastiest malware of 2024
LockBit, a ransomware malware known to have been used to attack Australian targets, has been...
Proofpoint email security tools pass IRAP assessment
Following on from its launch of Australian data centres last year, Proofpoint has completed an...
Government introduces landmark cybersecurity legislation
The Australian Government has introduced legislation to create Australia's first standalone...