![Talos Takes artwork](https://is2-ssl.mzstatic.com/image/thumb/Podcasts123/v4/85/ac/2a/85ac2a72-0ea4-6505-f5b8-26a1354cff60/mza_16438040018354364563.jpg/100x100bb.jpg)
XLLing and the post macro era
Talos Takes
English - January 20, 2023 15:00 - 9 minutes - 6.56 MBTechnology security cyber news security news cyber security news cisco talos snort incident response news roundup Homepage Download Google Podcasts Overcast Castro Pocket Casts RSS feed
Previous Episode: Year in Review: APT Summary Edition
Next Episode: Year in Review - Threat Landscape Edition
In this episode of Talos Takes we are joined by Vanja Svjacer to discuss his recent blog on XLL abuse. This year Microsoft finally removed support for macros from their office suite creating a vacuum in the threat landscape. Macros had been the tool of choice for adversaries for the last several years and the race to find alternatives is underway. In this episode we'll talk a bit about Office Add-Ins and how we've already seen adversaries starting to abuse XLL files in the wild.