While Microsoft has stopped Visual Basic for Applications (VBA) macro malware on its Azure cloud by invoking its Antimalware Scan Interface (AMSI) with Office 365 until recently it wasn’t doing anything about attacks written in Excel’s antique XLM macro language. Technical debt has all kinds of fun ways of coming back to kick you in the security rump.

Read full article on The New Stack