Tia N.List

Reported by 3 outlets

Microsoft Outlook to block MSIX attachments starting November

new1.0
Why this score
Breadth
1.50 / 2.0 · 3 sources
Authority
1.80 / 2.0 · best outlet weight
Severity
0.50 / 5.0 · CVSS + content signals
Velocity
0.00 / 2.0 · updates in 48h
Pickup speed
0.26 / 0.6 · time to second source
Recency
× 0.24 temporal multiplier
Community
+ 0.00 / 1.5 · reddit signal
Score
1.0 / 10 = base × recency + community
fawkes.rocksbleepingcomputer.comsecurityonline.info first seen 6d ago

Analysis

Microsoft will block MSIX and MSIXBundle attachments in Outlook and Exchange Online starting November 2026. Attackers have been using MSIX, the Windows app package format, to distribute malware past attachment filters because it can wrap installers and scripts. Blocking the file class entirely is a structural defense rather than a per-sample detection change. Legitimate vendors that distribute MSIX by email will need alternate delivery before the cutoff. Watch for attackers shifting to other container formats not yet covered, and for Microsoft extending the same restriction to additional executable packaging types.

Timeline

  1. update from fawkes.rocks

    Outlook to block MSIX attachments starting in November https:// fawkes.rocks/2026/10/07/outloo k-to-block-msix-attachments-starting-in-novem

    fawkes.rocks · 6d ago · October 7th, 2026

    Outlook to block MSIX attachments starting in November https:// fawkes.rocks/2026/10/07/outloo k-to-block-msix-attachments-starting-in-novem

    via Mastodon https://fawkes.rocks/2026/10/07/outlook-to-block-msix-attachments-starting-in-november/

  2. mentioned by www.bleepingcomputer.com

    # Microsoft # Outlook to block MSIX attachments starting November https://www. bleepingcomputer.com/news/micr osoft/microsoft-outlook-to-blo

    www.bleepingcomputer.com · 5d ago · October 8th, 2026

  3. update from securityonline.info

    Microsoft will block MSIX and MSIXBundle attachments in Outlook and Exchange Online starting November 2026 to prevent malware distribution.

    securityonline.info · 2d ago · October 12th, 2026

    Microsoft will block MSIX and MSIXBundle attachments in Outlook and Exchange Online starting November 2026 to prevent malware distribution. via Mastodon http://securityonline.info/outlook-msix-attachment-block/?utm_source=mastodon&utm_medium=jetpack_social

Covered in

digest 2026-10-12

Source on GitHub