Microsoft Excel Web Abfrage Kategorie: Datenbanken. Free graphics software for mac. Die Endung iqy kennzeichnet Web Abfragedateien von Microsoft Excel. Diese Dateien erlauben die Abfrage von ASP Webseiten und den Import der Informationen direkt in eine Excel-Arbeitsmappe. Integrating an Oracle BI Request with Microsoft Excel's Internet Query Feature.
Microsoft has silently added a new Group Policy (GPO) to allow Office 365 admins to block Excel users from opening untrusted Microsoft Query files with IQY, OQY, DQY, and RQY extensions.
Microsoft Query files are used to retrieve data from external sources such as corporate Microsoft Office Access, Microsoft SQL Server, and Microsoft SQL Server OLAP Services servers, Excel workbooks, and even from text files.
This type of file has been increasingly weaponized as part of malicious attacks, with various campaigns having been observed actively using IQY files, for instance, to deliver remote access Trojans and malware loaders since early 2018, with very recent reports also mentioning active campaigns.
Two other new GPOs allow Office admins to make sure that untrusted database files (e.g., DBF) and text-based files (i.e., CSV, DIFF, and SYLK) are always opened in Protected View as discovered by SwiftOnSecurity.
Free photography editing software for mac. NEW: Excel adds Group Policy to block untrusted Microsoft Query files (.iqy, .oqy, .dqy, .rqy) from opening. These files bypass many security controls to allow infection. Policy requires Office365 license.
Security threat: https://t.co/DVGJPRJKcR
ADMX: https://t.co/5c4KIoSX5E
Untrusted Microsoft Query files can also be blocked manually
The three GPOs can be downloaded via the Microsoft Download Center in the form of Administrative Template files (ADMX/ADML) for Office 365 ProPlus, Visio Pro for Office 365, and Project Online Desktop Client.
While the download page states that the Administrative Template files will also work for volume licensed versions of Office 2019 and Office 2016, the GPOs themselves say that the 'policy setting only applies to subscription versions of Office, such as Office 365 ProPlus.'
'If you enable this policy setting, Microsoft Query files in an untrusted location are prevented from opening. Users will not be able to change this setting under File > Options > Trust Center > Trust Center Settings > External Content,' says the new Excel Group Policy.
'If you disable or don't configure this policy setting, Microsoft Query files in an untrusted location are not prevented from opening, unless users have changed this setting in the Trust Center.'
Users can follow the following procedure if they want to block connections to Microsoft Query files on their own without using this new GPO:
• Click Options > Trust Center > Trust Center Settings, and then click External Content.
• Check the 'Always block the connection of untrusted Microsoft Query files (.iqy, .oqy, .dqy, and .rqy)' option
Outlook on the Web file extension blocklist also updated
Microsoft announced a week ago that they will also be blocking an additional 38 file extensions from being downloaded as attachments including Java, PowerShell, Python files to protect Outlook on the Web users from malicious attacks. Caffeine mac os x download.
This adds to the current list of 104 blocked file extensions users of Outlook on the Web are blocked from downloading as a security measure.
The 38 new extensions to be be blocked in Outlook on the Web are listed below.
• PowerShell extensions: .ps1, .ps1xml, .ps2, .ps2xml, .psc1, .psc2, .psd1, .psdm1, .psd1, .psdm1
• Certificate management extensions: .cer, .crt, .der
• Java extensions: .jar, .jnlp
• Extensions used by vulnerabilities: .appcontent-ms, .settingcontent-ms, .cnt, .hpj, .website, .webpnp, .mcf, .printerexport, .pl, .theme, .vbp, .xbap, .xll, .xnk, .msu, .diagcab, .grp
Incoming Office 365 security-focused updates
Microsoft also works on including a new Automated Incident Response playbook to Office 365 Advanced Threat Protection (ATP) to allow SecOps teams to investigate and remediate hacked accounts automatically, as well as a new tenant-wide idle session timeout feature for Microsoft 365 web apps for preventing information exposure stemming from unauthorized access to systems left unattended.
The company is also on extending the Office 365 Advanced Threat Protection (ATP) Safe Links protection capability to Office Online apps, a feature that provides 'time-of-click verification of web addresses' for URLs discovered in emails and Office documents, set to arrive in October.
Redmond is also currently rolling out better manual threat hunting features for the Office 365 Threat Explorer and is planning to enhance the quarantined malware and phishing email notification system for Microsoft 365 admins in early October.
Related Articles:
File TypeInternet Query
Developer | Microsoft |
Popularity | |
Category | Web Files |
Format | Text |
What is an IQY file?
Contains a URL and other parameters for making a query over the Internet; allows information to be retrieved from an .ASP Web page and imported into Microsoft Excel; saved in the Program FilesMicrosoft OfficeQueries directory by default.
IQY files also called Web Query files.
Open over 400 file formats with File Viewer Plus.