ENVIRONMENT

Summary from the TLDR InfoSec newsletter

Microsoft offers more than 2000 customizable policies for Office applications… but its security baseline covers just 137 by default. Haven't set these policies? Then you're potentially giving threat actors hundreds of ways to target your organization.