THIS HAS NOW BEEN FIXED - ZIP FILES ARE NOW SCANNED, THOUGH YOU CAN STILL BLOCK EXE FILES
After receiving a virus inside a zip file attachment in Microsoft
Office365, I contacted the helpdesk who confirmed that
the default security settings do not scan email attachments for executable (exe, com) files inside a zip folder. click here for the instructions.