WaterISAC Navigation
  • About
  • Report Incident
  • Contact Us
  • Become a Member
  • NRWA Signup
  • WaterISAC Champions
  • About
  • Report Incident
  • Contact Us
  • Become a Member
  • NRWA Signup
  • WaterISAC Champions
Home Posts Security Awareness – You May Wish to (Re)Block Macros in Microsoft Office Documents
Become a Member

Log in

  • Upcoming Events
  • Resource Center
  • Tools
  • Webcasts
  • Contaminant Databases
  • Community Partners
  • About
  • Log in

  • My Account

  • Logout

  • Report Incident
  • Contact Us
  • NRWA Signup
  • WaterISAC Champions
More Resources

Security Awareness – You May Wish to (Re)Block Macros in Microsoft Office Documents

Author: Alec Davison

Created: Tuesday, July 12, 2022 - 18:32

Categories: Cybersecurity

Microsoft has temporarily suspended a recently announced feature of auto blocking macros in Office files downloaded from the Internet. As threat actors spread malware via phishing emails that contain Office documents with macros that install malware on a victim’s computer, to help prevent this delivery method, in June Microsoft added the enhancement of automatically blocking macros in Office documents downloaded from the internet. However, within a month, Microsoft announced it will be temporarily rolling back this feature. Thus, to continue protecting your users/networks, you may wish to (re) auto block macros. System administrators are encouraged to review relevant Microsoft Office group policy documentation for “Block macros from running Office files from the Internet.” Read more at BleepingComputer.

Related Resources

Members Only

(TLP:AMBER+STRICT) Situation Report: Heightened Threat Environment – Potential Retaliation by Iranian Threat Actors Following U.S. Strikes on Iran (Updated June 18, 2026)

Jun 18, 2026 in Cybersecurity, OT-ICS Security, Physical Security, Security Preparedness
Members Only

(TLP:AMBER) IOC Associated with Volt Typhoon Performed Network Enumeration on Utah Infrastructure

Jun 18, 2026 in Cybersecurity, Federal & State Resources, Security Preparedness

(TLP:CLEAR) Email Impersonation Remains a Persistent Risk for Water Utilities

Jun 18, 2026 in Cybersecurity, Security Preparedness

Become a Member
FAQs
About
Report Incident
Traffic Light Protocol (TLP)

Terms & Conditions
Privacy Policy
AI Policy
Contact Us

LinkedIn

1250 I Street NW, Suite 350
Washington, DC 20005
1-866-H2O-ISAC (1-866-426-4722)
© 2026 WaterISAC. All Rights Reserved.

Toggle the Widgetbar