Microsoft has announced that it will soon update security defaults for all Microsoft 365 tenants to block access to SharePoint, OneDrive, and Office files via legacy authentication protocols.

By disabling them by default, Microsoft will close a pathway often used in phishing and other malware delivery that exploits indirect access to risky file types.