Security News > 2020 > April > Microsoft Office 365: This new feature will keep you safe from malware-filled documents

Application Guard for Office and Safe Documents will make phishing attacks harder and the Office experience better for users, starting with Office 365 Pro Plus and E5 licences.
It's a big step forward because Office macros, embedded scripts, active content like OLE and COM controls, and documents with obfuscated links to malware remain a major source of attacks - and Protected View leaves a key security decision up to users who may be ill-equipped to decide which documents are safe.
There is still a way to take documents out of the Application Guard sandbox, using the Safe Documents feature that's already in Office Insider public preview.
It will work automatically for Outlook attachments, documents downloaded from any domain that's not your intranet or a trusted site, and files in untrusted folders like the Temporary Internet folder, as long as Application Guard is enabled as a Windows 10 feature, the documents are opened in Office 365 ProPlus and you have either a Microsoft 365 E5 or Microsoft 365 Security E5 license.
Because Safe Documents and Application Guard feed information about dangerous documents back into the Microsoft Security Graph, they indirectly protect users who don't have Office 365 ProPlus or an E5 licence.
News URL
Related news
- Fake Microsoft Office add-in tools push malware via SourceForge (source)
- Microsoft: New Windows scheduled task will launch Office apps faster (source)
- Android Malware Exploits a Microsoft-Related Security Blind Spot to Avoid Detection (source)
- Microsoft Warns of Tax-Themed Email Attacks Using PDFs and QR Codes to Deliver Malware (source)
- Microsoft releases emergency update to fix Office 2016 crashes (source)
- Microsoft blocks ActiveX by default in Microsoft 365, Office 2024 (source)
- Microsoft: Office 2016 and Office 2019 reach end of support in October (source)
- Microsoft will update Office apps on Windows 10 until 2028 (source)
- South Asian Ministries Hit by SideWinder APT Using Old Office Flaws and Custom Malware (source)