Tuesday, May 13, 2025
HomeCyber Security NewsMicrosoft Re-Releasing Exchange Server Nov 2024 Security Update Fixing Transport Rules

Microsoft Re-Releasing Exchange Server Nov 2024 Security Update Fixing Transport Rules

Published on

SIEM as a Service

Follow Us on Google News

Microsoft has re-released the November 2024 Security Update (SU) with enhancements to rectify problems encountered with transport rules.

Originally rolled out on November 12, 2024, as part of its ongoing security update efforts, the initial SU (referred to as Nov 2024 SUv1 with article KB5044062) led to unexpected interruptions in transport rules, impacting certain environments after some time.

The re-released update, labeled as Nov 2024 SUv2, was made available on November 27, 2024, under article KB5049233.

- Advertisement - Google News

This update not only resolves the transport rules issue but also introduces improved control over the X-MS-Exchange-P2FromRegexMatch header, enhancing the robustness and reliability of the Exchange Server.

Analyze cyber threats with ANYRUN's powerful sandbox. Black Friday Deals : Get up to 3 Free Licenses.

Steps for Application

Depending on how the initial update was applied and the specific needs of an organization, Microsoft has outlined a clear course of action:

  1. Manual Installation without Transport or DLP Rules: If the original SUv1 was installed manually and your environment does not utilize transport or DLP rules, it is advisable to update to SUv2 to benefit from the enhanced control provided.
  2. Automatic Installation without Transport or DLP Rules: Environments that received the initial SUv1 through Microsoft/Windows Update will automatically receive the updated SUv2 in December 2024.
  3. Uninstalled SUv1 to Address Transport Rules Issue: For those who uninstalled the original SU to address the transport rule issue, immediate installation of SUv2 is recommended to ensure functionality and security.
  4. No Installation of SUv1: If the original SU was never installed, applying SUv2 is necessary to safeguard your system and benefit from the latest updates.

The downloadable links for the re-released update are accessible through the November 2024 SU announcement blog post.

Microsoft also encourages users to consult the initial release blog post for additional necessary actions and recommends running the Exchange Health Checker to determine any further steps needed for maintaining system health.

Through these timely interventions, Microsoft continues to demonstrate its commitment to providing secure and reliable solutions, ensuring that organizations can maintain seamless and secure communications infrastructure.

Leveraging 2024 MITRE ATT&CK Results for SME & MSP Cybersecurity Leaders – Attend Free Webinar

Divya
Divya
Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Latest articles

Lumma Stealer Upgraded with PowerShell Tools and Advanced Evasion Techniques

Sophos Managed Detection and Response (MDR) in September 2024, the notorious Lumma Stealer malware...

New Noodlophile Malware Spreads Through Fake AI Video Generation Platforms

Cybercriminals have unleashed a new malware campaign using fake AI video generation platforms as...

Kimsuky Hacker Group Deploys New Phishing Techniques and Malware Campaigns

The North Korean state-sponsored Advanced Persistent Threat (APT) group Kimsuky, also known as “Black...

APT37 Hackers Use Weaponized LNK Files and Dropbox for Command-and-Control Operations

The North Korean state-sponsored hacking group APT37, also known as ScarCruft, launched a spear...

Resilience at Scale

Why Application Security is Non-Negotiable

The resilience of your digital infrastructure directly impacts your ability to scale. And yet, application security remains a critical weak link for most organizations.

Application Security is no longer just a defensive play—it’s the cornerstone of cyber resilience and sustainable growth. In this webinar, Karthik Krishnamoorthy (CTO of Indusface) and Phani Deepak Akella (VP of Marketing – Indusface), will share how AI-powered application security can help organizations build resilience by

Discussion points


Protecting at internet scale using AI and behavioral-based DDoS & bot mitigation.
Autonomously discovering external assets and remediating vulnerabilities within 72 hours, enabling secure, confident scaling.
Ensuring 100% application availability through platforms architected for failure resilience.
Eliminating silos with real-time correlation between attack surface and active threats for rapid, accurate mitigation

More like this

Lumma Stealer Upgraded with PowerShell Tools and Advanced Evasion Techniques

Sophos Managed Detection and Response (MDR) in September 2024, the notorious Lumma Stealer malware...

New Noodlophile Malware Spreads Through Fake AI Video Generation Platforms

Cybercriminals have unleashed a new malware campaign using fake AI video generation platforms as...

Kimsuky Hacker Group Deploys New Phishing Techniques and Malware Campaigns

The North Korean state-sponsored Advanced Persistent Threat (APT) group Kimsuky, also known as “Black...