Message Recall Feature May Be Added To Office 365

For a while now, Microsoft Outlook users have enjoyed a highly popular addition to their email service. In a nutshell, it allows them to recall messages that have been sent using Outlook, which is an Exchange Online hosted cloud email service for business.

They can un-send the emails, provided that the recipient is using Outlook and the messages haven’t been opened yet.

It’s a good, well-implemented feature. Recently, Microsoft announced that it will be expanding its availability, adding it for all Office 365 environments during the fourth quarter of 2020.

The company had this to say on a recent blog post on the subject:

“The Outlook for Windows Message Recall feature is extremely popular with users, yet it doesn’t always work so well. Part of the problem is that the recall is client-based and the recall can only happen if the recipient also uses Outlook.

With millions of users with mailboxes in Office 365, we’re now able to improve upon that feature by performing the recall directly in the cloud in Office 365 mailboxes, so it doesn’t matter which email client the recipient uses, the recall takes place in their Office 365 mailbox, and when their client syncs their mail, the message is gone.”

As part of the Office 365 implementation of this feature, users will also have an aggregate message recall status report available to them that they’ll be able to use to tell at a glance which messages were successfully recalled and which ones were not.

If you want more, you should know that Microsoft has recently announced it will be adding protections against Reply-All email storms. They have not-so-affectionately been referred to as ‘Reply-allpocalypses’ that are set off when people send emails with a large email distribution list. They can easily lead to accidental denial of service that can bring even the most robust email servers to their knees.

Both are welcome additions indeed. Kudos to Microsoft for the coming improvements.

New Icons Coming To Microsoft Windows 10

Windows users aren’t big fans of change. Recall the cries of outrage when Microsoft tried in vain to retire MS Paint, which was never a very good graphics program and only a small subcomponent of the company’s OS. Users revolted to the point that Microsoft decided rather than kill off the ancient program, they simply moved it to the app store so people could keep access to it if and as they wished.

The company gets the same reaction even if they make smaller changes, including changing icons. Last year, the company tread very carefully when they rolled out ten new Office Icons. They were redesigned to have a similar look and feel to the old icons while gently pushing the company’s user base toward something a bit more sleek and modern.

Given a successful baby step on that front, the company is moving ahead with the modernization of more than 100 icons over the course of this year. Those will include Windows utilities, mixed reality icons, and standalone apps.

Jon Friedman, the Corporate VP of Design and Research at Microsoft, had some information to share. He said all of the redesigned icons will have a similar look and feel as part of Microsoft’s Fluent Design System, with the goal being to ensure that “each icon authentically represented both the product truth and the larger Microsoft brand.”

Friedman also added:

We needed to signal innovation and change while maintaining familiarity for customers. We also had to develop a flexible and open design system to span a range of contexts while still being true to Microsoft. Whether our customers use their phone, PC, or VR headset to get work done, we wanted to reach people in every environment. The newest design guidelines helped us unify icon constructions across the company and within each product family.”

We have to admit that we’re curious to see what the new designs look like, and what the reaction of the Windows user base will be.

Fake Voicemail Messages Tricking People Into Opening Malicious Content

Office 365 has been the target of an increasing number of ongoing phishing scams.

The latest scam involves using fake voicemail messages to convince targets that they need to log in to hear the full recording.

Researchers at McAfee Labs had this to say about the matter:

“Over the past few weeks McAfee Labs has been observing a new phishing campaign using a fake voicemail message to lure victims into entering their Office 365 email credentials.  At first, we believed that only one phishing kit was being used to harvest the user’s credentials.  However, during our investigation, we found three different malicious kits and evidence of several high-profile companies being targeted.”

Recipients will receive an email message informing them that they missed a call.  A partial recording is available andembedded in the email, but the recipient gets little more than hello, so there’s no real indication of what the message might be about.

Then, if the recipient clicks the link provided to “log in and hear the message” they will, of course, be sent to a page that looks like an Office 365 login screen.  All they’re really doing at that point is handing their credentials over to whomever sent the message.

As we said at the start, Office 365 has become an increasingly popular target.  There’s another scam making the rounds that tries to get a user’s login credentials by making it seem as though the message was sent by the recipient’s employer’s HR department and talks about an upcoming raise.

Both are powerful approaches that have been yielding better results than usual for the scammers.  Be sure your IT staff and all of your employees are aware of and on their guard against these scams.

New Office 365 Feature May Prevent Questionable Emails

Microsoft continues their war against spam and phishing emails with the rollout of a new feature in Office 365 called ‘Unverified Sender’.

It is designed to help Outlook users identify emails that may contain poisoned files or requests for personal or sensitive information that could be used to steal a user’s identity.

The company had this to say about the new feature:

“Unverified Sender is a new Office 365 feature that helps end-users identify suspicious messages in their inbox…we’ve added an indicator that demonstrates Office 365 spoof intelligence was unable to verify the sender.”

When you toggle the new feature on, any email in your inbox that the AI is unable to identify or verify will be marked. It will have the sender’s initials or photo replaced with a question mark in the People Card. That will make it easy for any Office 365 user to spot potential phishing or sender spoofing attempts.

In tandem with the Unverified Sender feature, Microsoft is also increasing the size of its DKIM keys from 1024-bit to 2048-bit for all Office 365 customers during the month of October. They are doing this in order to enhance security in all environments.

About this, the company published the following:

“If you already have your default or custom domain DKIM enabled in Office 365, it will automatically be upgraded from 1024-bit to 2048-bit at your next DKIM configuration rotation date…This new 2048-bit key takes effect on the RotateOnDate and will send emails with the 1024-bit key in the interim.  After four days, you can test again with the 2048-bit key (that is, once the rotation takes effect to the second selector).”

Finally, Microsoft is rolling out a feature they announced in late July of this year (2019), which is their improved Malicious Email Analysis.  Collectively, these new features should provide a much safer environment for all Office 365 users.  Kudos to Microsoft for that!

Support For Microsoft Office 2010 Ending Soon Upgrade Recommended

Are you still using Microsoft Office 2010?

If so, Microsoft recently issued a reminder you’re not going to like hearing.

Extended Support for Office 2010 expires on October 13th, 2020, so time is running out to upgrade. The company’s official recommendation is to upgrade to either Office 365 ProPlus, or Office 2019.

In addition to that, “We also recommend business and enterprise customers use the deployment benefits provided by Microsoft and Microsoft Certified Partners, including Microsoft FastTrack for cloud migrations and Software Assurance Planning Services for on-premises upgrades.”  This, according to the Office 2010 End of Support Roadmap, published by Microsoft.

Elsewhere on Microsoft’s site, the company seems to be pushing hard for Enterprise users to upgrade to Office 365 ProPlus. In particular, they added the following information:

“Upgrade to Office 365 ProPlus, a product built for today’s challenges and literally getting better all the time, as we continue innovating across–and investing in–the experience.  Consider just a few benefits:  AI and machine learning to advance creativity and innovation, real time collaboration across apps, and Microsoft Teams as the hub for teamwork.”

All of that is well and good, and certainly true. However, for some Enterprise users, office 2019 might simply be the better fit, even if the company isn’t pushing it as hard. In any case, the takeaway is simply this:  Support is ending for Office 2010.  If you’re still using it, you need to be making migration plans now and begin using one of the two aforementioned products before the support period ends.  You’ll find detailed instructions on how to migrate on the company’s website if you don’t already have a clear understanding of the process.

In a related vein, note that the Windows 10 Creators Update (version 1703) has now reached end of service and will no longer receive any quality or security updates.