Microsoft Quietly Rolls Back Plan to Block Office VBA Macros by Default

Five months after announcing plans to disable Visual Basic for
Applications (VBA) macros by default in the Office productivity
suite, Microsoft appears to have rolled back its plans.

“Based on feedback received, a rollback has started,” Microsoft
employee Angela Robertson said^[1]
in a July 6 comment. “An update about the rollback is in progress.
I apologize for any inconvenience of the rollback starting before
the update about the change was made available.”

In February 2022, the tech giant said^[2]
it was disabling macros by default across its products, including
Word, Excel, PowerPoint, Access, and Visio, for documents
downloaded from the web in an attempt to mitigate potential attacks
that abuse the functionality for deploying malware.

“Bad actors send macros in Office files to end users who
unknowingly enable them, malicious payloads are delivered, and the
impact can be severe including malware, compromised identity, data
loss, and remote access,” Microsoft noted at the time.

It’s not immediately clear what the “feedback” was or what
prompted Redmond to reverse course without any official notice. We
have reached out to Microsoft for further comment, and we will
update the story if we hear back.