Cybercriminals are bypassing Microsoft’s blocking of macros in its Office suite by using alternative files to host malware, according to Proofpoint’s Threat Research Team. The usage of macros in malware campaigns has decreased by around 66% between October 2021 and June 2022, following Microsoft’s introduction of macro-blocking features. However, threat actors are now using container files such as ISO and RAR attachments, and Windows Shortcut files to carry malware, with campaigns doing so rising nearly 175% during that period.

Microsoft Teams To Block Screen Capture During Meetings
Microsoft will launch a “Prevent Screen Capture” feature for Teams in July 2025 to block unauthorized screenshots during meetings, addressing a key vulnerability. The feature