Microsoft 365 will disable ActiveX due to excessive hacker abuse

Microsoft Office has supported ActiveX for years as an option for document extension and automation, but it's also a serious security vulnerability. Now, Microsoft is finally starting to disable ActiveX in Microsoft 365 apps, following a similar move with the Office 2024 suite last year.

Important Security Changes

Starting this month, Windows versions of Microsoft Word, Excel, PowerPoint, and Visio in Microsoft 365 will disable all ActiveX content by default without displaying a notification. The Mac and web versions of Office have never supported ActiveX.

" The previous default setting allowed users to enable potentially dangerous ActiveX controls, which could be exploited by hackers through social engineering or malicious files. The new default setting is more secure because it completely blocks these controls, reducing the risk of malware or unauthorized code execution, " Microsoft said in a blog post.

This change was rolled out in Microsoft Office 2024, but now it will apply to subscription-based Microsoft 365 apps as well. The feature is currently available on the Beta Channel for Version 2504 (Build 18730.20030) and later and will roll out to all Windows users soon.

Microsoft 365 will disable ActiveX due to excessive hacker abuse

ActiveX is not completely removed

It's important to note that ActiveX has not been completely removed from Office applications. Some organizations may still have it enabled, and individual accounts can re-enable it by going to:
File > Options > Trust Center > Trust Center Settings > ActiveX Settings > Prompt me before enabling all controls with minimal restrictions .

Microsoft released the first version of ActiveX in 1996, allowing web pages in Internet Explorer and Office documents to embed complex code and interactive content. For example, ActiveX can create buttons and checklists in Office documents that can modify the document or perform external actions when clicked.

While ActiveX has some legitimate uses, it is more notorious for phishing and malware attacks. There have been multiple security vulnerabilities in ActiveX that allow a seemingly innocent Word or PowerPoint document to change Windows settings and files. It is also a frequent security and privacy threat in Internet Explorer and has never made it to Microsoft Edge.

Microsoft previously updated Office applications to not automatically run ActiveX content, but some malicious files can still trick users into clicking the "Enable Content" button. Microsoft removing this option by default should help reduce attacks, while still allowing ActiveX to run if absolutely necessary.

This change appears to be the final step before ActiveX is removed from Office entirely, but it's unclear when (or if) that will happen. Some documents only work properly with ActiveX, and Microsoft's new Add-ins platform isn't a complete replacement.

Disabling ActiveX is another step in Microsoft's efforts to reduce security risks, especially as phishing and malware attacks become more sophisticated.

Leave a Comment

Distinguishing Microsoft 365 and Office 2024

Distinguishing Microsoft 365 and Office 2024

At first glance, Microsoft 365 and Office 2024 may seem very similar, as they both give you access to Microsoft's popular and widely used applications.

How to use Microsoft 365 AI features wisely

How to use Microsoft 365 AI features wisely

Microsoft now offers AI-powered Copilot features as part of existing Microsoft 365 Personal and Family subscriptions—no add-on required. But the capabilities aren't limitless—they work on a new system called AI credits.

8 Cheapest Cloud Storage Providers

8 Cheapest Cloud Storage Providers

Let’s take a look at the cheapest online cloud storage options available. We’ll look at prices both in absolute terms and per gigabyte (per month) so you can choose what’s best for you.

Microsoft Defender VPN will stop rolling out to Microsoft 365 subscribers

Microsoft Defender VPN will stop rolling out to Microsoft 365 subscribers

Back in 2023, Microsoft launched a new feature for Microsoft Defender users called Privacy Protection.

Why upgrading to Microsoft 365 might not be worth it?

Why upgrading to Microsoft 365 might not be worth it?

The convenience that Microsoft 365, formerly Office 365, brings is undeniable, but it also comes with some major drawbacks.

Microsoft 365 Android PDF Viewer shows ads, even with subscription

Microsoft 365 Android PDF Viewer shows ads, even with subscription

Some people are reporting that the PDF reader that comes with Microsoft 365 for Android is now showing ads at the top of the page, even though they've paid monthly for the service.

Remote Desktop Alternative App Now Available on Android

Remote Desktop Alternative App Now Available on Android

Microsoft continues to push ahead with plans to replace the Remote Desktop application on different platforms with a new Windows App, this time for the Android operating system.

Office 2021 vs. Microsoft 365: Which software is right for you?

Office 2021 vs. Microsoft 365: Which software is right for you?

Office 2021 vs. Microsoft 365: Which software is right for you?, Office 2021 and Microsoft 365 can both meet office editing tasks. So Office 2021

How to Fix Microsoft Teams Error K Security

How to Fix Microsoft Teams Error K Security

Struggling with Microsoft Teams "Error K" Security? Follow our step-by-step guide to fix it quickly—no tech expertise needed. Get back to seamless collaboration today!

How to Fix Microsoft Teams Update Error 0x80070002

How to Fix Microsoft Teams Update Error 0x80070002

Struggling with Microsoft Teams Update Error 0x80070002? Discover step-by-step fixes to resolve it quickly. Clear cache, repair files, and get back to seamless updates today!

Solving Microsoft Teams Web Error Browser Login

Solving Microsoft Teams Web Error Browser Login

Tired of Microsoft Teams "Web Error" blocking your browser login? Follow our step-by-step guide with proven fixes to resolve Teams web login issues fast and securely. Get back to work!

How to Fix Microsoft Teams Error O Offline

How to Fix Microsoft Teams Error O Offline

Stuck with Microsoft Teams "Error O" Offline? Discover proven, step-by-step fixes to get back online fast. Clear cache, restart, and more – no tech skills needed!

Where is Microsoft Teams in Outlook? Locating the Missing Icon

Where is Microsoft Teams in Outlook? Locating the Missing Icon

Frustrated by the missing Microsoft Teams icon in Outlook? Learn exactly where to find it, why it disappears, and proven steps to restore it for effortless meetings. Updated for the latest versions!

Solving Microsoft Teams Windows 10 Error Login Issues

Solving Microsoft Teams Windows 10 Error Login Issues

Struggling with Microsoft Teams "Windows 10 Error" login issues? Get instant fixes for cache clears, updates, and more. Step-by-step solutions to solve Microsoft Teams login error on Windows 10 fast and frustration-free.

Solving Microsoft Teams Website Error Tab Not Loading

Solving Microsoft Teams Website Error Tab Not Loading

Tired of the frustrating Microsoft Teams "Website Error" where tabs won’t load? Get step-by-step fixes to resolve it quickly and boost your productivity. Essential troubleshooting for seamless Teams experience.

How to Fix Microsoft Teams Web Error 503 Service Unavailable

How to Fix Microsoft Teams Web Error 503 Service Unavailable

Tired of the frustrating Microsoft Teams "Web Error" 503 Service Unavailable? Discover proven, step-by-step fixes for Teams 503 error on web. Get back online fast with our expert guide. Works on all browsers!

How to Fix Microsoft Teams Win 7 Error Compatibility

How to Fix Microsoft Teams Win 7 Error Compatibility

Struggling with Microsoft Teams "Win 7 Error" compatibility? Discover step-by-step fixes to restore seamless video calls and chats on unsupported Windows versions. Quick, reliable solutions inside!

Troubleshooting Microsoft Teams Breakout Rooms License Errors

Troubleshooting Microsoft Teams Breakout Rooms License Errors

Master troubleshooting Microsoft Teams Breakout Rooms license errors with this step-by-step guide. Quick fixes for common license issues, admin checks, and prevention tips to get your meetings running smoothly.

How to Fix Microsoft Teams Version History Error

How to Fix Microsoft Teams Version History Error

Struggling with Microsoft Teams "Version History" Error? Discover proven, step-by-step fixes to restore access instantly. Clear cache, update Teams, and more—no tech skills needed!

Solving Microsoft Teams Joining Error: Meeting ID Not Found

Solving Microsoft Teams Joining Error: Meeting ID Not Found

Tired of the frustrating Microsoft Teams Joining Error: Meeting ID Not Found? Get step-by-step fixes to rejoin meetings fast. Updated with the latest Teams patches for seamless collaboration. Solve it now!

Troubleshooting Microsoft Teams Video Error Green Screen

Troubleshooting Microsoft Teams Video Error Green Screen

Struggling with Microsoft Teams "Video Error" green screen? Discover proven, step-by-step troubleshooting fixes for seamless video calls. Quick solutions inside!

How to Fix Microsoft Teams How Teams Works Tutorial Error

How to Fix Microsoft Teams How Teams Works Tutorial Error

Struggling with the Microsoft Teams "How Teams Works" Tutorial Error? Discover proven, step-by-step fixes to resolve it quickly. Clear cache, update, and more for seamless onboarding. Works on latest versions!

How to Fix Microsoft Teams Error Today on Windows 10

How to Fix Microsoft Teams Error Today on Windows 10

Tired of the frustrating Microsoft Teams "Error Today" on Windows 10? Discover proven, step-by-step fixes to resolve it quickly and restore smooth teamwork. No tech skills needed!