{"id":624700,"date":"2023-04-02T09:49:36","date_gmt":"2023-04-02T14:49:36","guid":{"rendered":"https:\/\/news.sellorbuyhomefast.com\/index.php\/2023\/04\/02\/microsoft-is-finally-cracking-down-on-one-of-its-biggest-windows-security-risks\/"},"modified":"2023-04-02T09:49:36","modified_gmt":"2023-04-02T14:49:36","slug":"microsoft-is-finally-cracking-down-on-one-of-its-biggest-windows-security-risks","status":"publish","type":"post","link":"https:\/\/newsycanuse.com\/index.php\/2023\/04\/02\/microsoft-is-finally-cracking-down-on-one-of-its-biggest-windows-security-risks\/","title":{"rendered":"Microsoft is finally cracking down on one of its biggest Windows security risks"},"content":{"rendered":"<article aria-label=\"article\" data-id=\"837brATBMgyg6wK5M9YaiA\">\n<header>\n<nav aria-label=\"Breadcrumbs\">\n<ol>\n<li>\n<a href=\"https:\/\/www.techradar.com\" aria-label=\"Return to Home\">Home<\/a>\n<\/li>\n<li>\n<a href=\"https:\/\/www.techradar.com\/news\" aria-label=\"Return to News\">News<\/a>\n<\/li>\n<li>\n<a href=\"https:\/\/www.techradar.com\/computing\" aria-label=\"Return to Computing\">Computing<\/a>\n<\/li>\n<\/ol>\n<\/nav>\n<\/header>\n<section>\n<div itemprop=\"image\" itemscope itemtype=\"https:\/\/schema.org\/ImageObject\">\n<div>\n<picture><source type=\"image\/webp\" alt=\"Microsoft OneNote review\" onerror=\"if(this.src &#038;&#038; this.src.indexOf('missing-image.svg') !== -1){return true;};this.parentNode.replaceChild(window.missingImage(),this)\"   data-original-mos=\"https:\/\/cdn.mos.cms.futurecdn.net\/JxAcBWMrMsvxHTnrxDbEvY.jpg\" data-pin-media=\"https:\/\/cdn.mos.cms.futurecdn.net\/JxAcBWMrMsvxHTnrxDbEvY.jpg\"><source type=\"image\/jpeg\" alt=\"Microsoft OneNote review\" onerror=\"if(this.src &#038;&#038; this.src.indexOf('missing-image.svg') !== -1){return true;};this.parentNode.replaceChild(window.missingImage(),this)\"   data-original-mos=\"https:\/\/cdn.mos.cms.futurecdn.net\/JxAcBWMrMsvxHTnrxDbEvY.jpg\" data-pin-media=\"https:\/\/cdn.mos.cms.futurecdn.net\/JxAcBWMrMsvxHTnrxDbEvY.jpg\"><img decoding=\"async\" src=\"https:\/\/cdn.mos.cms.futurecdn.net\/JxAcBWMrMsvxHTnrxDbEvY-320-80.jpg\" alt=\"Microsoft OneNote review\" onerror=\"if(this.src &#038;&#038; this.src.indexOf('missing-image.svg') !== -1){return true;};this.parentNode.replaceChild(window.missingImage(),this)\"   data-original-mos=\"https:\/\/cdn.mos.cms.futurecdn.net\/JxAcBWMrMsvxHTnrxDbEvY.jpg\" data-pin-media=\"https:\/\/cdn.mos.cms.futurecdn.net\/JxAcBWMrMsvxHTnrxDbEvY.jpg\"><\/picture>\n<\/div>\n<p><meta itemprop=\"url\" content=\"https:\/\/cdn.mos.cms.futurecdn.net\/JxAcBWMrMsvxHTnrxDbEvY.jpg\"><br \/>\n<meta itemprop=\"height\" content=\"600\"><br \/>\n<meta itemprop=\"width\" content=\"338\"><figcaption itemprop=\"caption description\">\n<span itemprop=\"copyrightHolder\">(Image credit: Microsoft OneNote)<\/span><br \/>\n<\/figcaption><\/div>\n<div id=\"article-body\">\n<p>Microsoft \u00a0has shared more details about an important security update to OneNote, through which it hopes address the growing issue of its program increasingly being used to push <a href=\"https:\/\/www.techradar.com\/best\/best-ransomware-protection\">ransomware<\/a> and other types of malware.<\/p>\n<p>In a new Microsoft 365 <a href=\"https:\/\/click.linksynergy.com\/deeplink?id=kXQk6%2AivFEQ&#038;mid=24542&#038;u1=trdpro-us-1275899418090036700&#038;murl=https%3A%2F%2Fsupport.microsoft.com%2Fen-us%2Foffice%2Fblocked-attachments-in-outlook-434752e1-02d3-4e90-9124-8b81e49a8519%23%3A~%3Atext%3DFile%2520types%2520blocked%2520in%2520Outlook\" target=\"_blank\" data-url=\"https:\/\/support.microsoft.com\/en-us\/office\/blocked-attachments-in-outlook-434752e1-02d3-4e90-9124-8b81e49a8519#:~:text=File%20types%20blocked%20in%20Outlook\" data-hl-processed=\"hawklinks\" data-placeholder-url=\"https:\/\/click.linksynergy.com\/deeplink?id=kXQk6%2AivFEQ&#038;mid=24542&#038;u1=hawk-custom-tracking&#038;murl=https%3A%2F%2Fsupport.microsoft.com%2Fen-us%2Foffice%2Fblocked-attachments-in-outlook-434752e1-02d3-4e90-9124-8b81e49a8519%23%3A~%3Atext%3DFile%2520types%2520blocked%2520in%2520Outlook\" rel=\"sponsored noopener\" referrerpolicy=\"no-referrer-when-downgrade\" data-google-interstitial=\"false\" data-merchant-name=\"microsoft.com\" data-merchant-id=\"1855\" data-merchant-url=\"microsoft.com\" data-merchant-network=\"LS\">support document<\/a><span> (opens in new tab)<\/span>, the company listed a total of 120 file extensions that will soon be blocked in OneNote. Among the file types .XLL, .ISO, .BAT, and .JS stand out.\u00a0<\/p>\n<p>These extensions will also be blocked in other <a href=\"https:\/\/www.techradar.com\/best\/free-office-software\" target=\"_blank\" rel=\"noopener\"><u>Office 365 <\/u><\/a><span> (opens in new tab)<\/span>programs such as Outlook, Word, Excel, or PowerPoint.\u00a0<\/p>\n<h2 id=\"blocking-files-xa0\">Blocking files\u00a0<\/h2>\n<p>While previously, trying to open a OneNote file with a suspicious attachment would bring up a warning notification, the new update will prevent the file from being opened &#8211; at all. Instead, the user will be met with a warning dialog saying \u201cYour administrator has blocked your ability to open this file type in OneNote\u201d.<\/p>\n<p>The changes will roll out in Version 2304 in Current Channel (Preview) to OneNote for Microsoft 365, on Windows-powered devices, either in April, or May, this year, it was said. Retail versions of Office 2021, Office 2019, and Office 2016 (Current Channel) will also be updated to reflect these changes, however, volume-licensed versions of Office (Office Standard 2019, or OFfice LTSC Professional Plus 2021) will not get the update.<\/p>\n<p>OneNote on the web, OneNote for Windows 10, OneNote for Mac, or OneNote for Android\/iOS will not be updated, as well.\u00a0<\/p>\n<p>Ever since Microsoft blocked its productivity apps from running macros, hackers have been looking for a viable alternative to deliver <a href=\"https:\/\/www.techradar.com\/best\/best-malware-removal\">malware<\/a>. Among the different methods one stood out &#8211; OneNote files with malicious attachments. The practice has gotten so tremendously popular, so quickly, that it forced Microsoft\u2019s hand and triggered the upcoming update.\u00a0<\/p>\n<p>Another popular method of malware delivery is phishing emails with .ISO files attached which, by sideloading malicious .DLL files, successfully download stage-two payloads to unsuspecting victims\u2019 endpoints.<\/p>\n<ul>\n<li>We&#8217;ve also rounded up the <a href=\"https:\/\/www.techradar.com\/best\/free-office-software\">best free office software<\/a> around<\/li>\n<\/ul>\n<p>Via: <a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/microsoft-onenote-will-block-120-dangerous-file-extensions\/\" target=\"_blank\" data-url=\"https:\/\/www.bleepingcomputer.com\/news\/security\/microsoft-onenote-will-block-120-dangerous-file-extensions\/\" rel=\"noopener\"><u>BleepingComputer<\/u><\/a><span> (opens in new tab)<\/span><\/p>\n<\/div>\n<div data-hydrate=\"true\" data-reactroot id=\"slice-container-newsletterForm-articleInbodyContent\">\n<section>\n<p>Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!<\/p>\n<\/section>\n<\/div>\n<div data-reactroot id=\"slice-container-authorBio\">\n<p>Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he\u2019s written for numerous media outlets, including Al Jazeera Balkans. He\u2019s also held several modules on content writing for Represent Communications.<\/p>\n<\/div>\n<\/section>\n<div data-reactroot id=\"slice-container-relatedArticles\">\n<p><h5>Most Popular<\/h5>\n<\/p>\n<\/div>\n<p><a href=\"https:\/\/www.techradar.com\/news\/microsoft-is-finally-cracking-down-on-one-of-its-biggest-security-risks\" class=\"button purchase\" rel=\"nofollow noopener\" target=\"_blank\">Read More<\/a><br \/>\n Sharie Mcnaught<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Home News Computing (Image credit: Microsoft OneNote) Microsoft \u00a0has shared more details about an important security update to OneNote, through which it hopes address the growing issue of its program increasingly being used to push ransomware and other types of malware.In a new Microsoft 365 support document (opens in new tab), the company listed a<\/p>\n","protected":false},"author":1,"featured_media":624701,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[848,78,46],"tags":[],"class_list":{"0":"post-624700","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-finally","8":"category-microsoft","9":"category-technology"},"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/posts\/624700","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/comments?post=624700"}],"version-history":[{"count":0,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/posts\/624700\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/media\/624701"}],"wp:attachment":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/media?parent=624700"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/categories?post=624700"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/tags?post=624700"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}