Microsoft will disable XLM macros in Microsoft 365 to prevent users from falling victim to attacks that leverage this legacy feature.
Microsoft has revealed its plan to disable Excel 4.0 macros or XLM macros for all Microsoft 365 users in a recent email sent out to its customers. First introduced back in 1992 with the release of Excel 4.0, XLM macros allow users of the company’s spreadsheet software to enter complex formulas inside Excel cells capable of executing commands both in the program itself and in a Windows computer’s local file system. Although XLM macros were replaced by VBA-based macros when Excel 5.0 was released, Microsoft has continued supporting this legacy feature over the years. Although macros are convenient for Excel users, they have also been repeatedly abused by cybercriminals in their attacks.
