#CVE202449040

Microsoft re-releases Exchange updates after fixing mail delivery

by

November 27, 2024 at 05:39PM Microsoft has re-released the November 2024 security updates for Exchange Server after resolving email delivery issues caused by the initial updates. Admins are advised to install the new version (Nov 2024 SUv2) for improved control and security. Automatic updates will be delayed until December to avoid disruption during Thanksgiving. ### … Read more

Microsoft Exchange adds warning to emails abusing spoofing flaw

by

November 12, 2024 at 04:47PM Microsoft revealed a critical vulnerability (CVE-2024-49040) in Exchange Server 2016 and 2019, allowing email spoofing by forging legitimate senders. Discovered by Vsevolod Kokorin, the flaw leads to exploitation risks. Microsoft has released updates for detection and added warning banners for suspicious emails, urging users to maintain security features. ### Meeting … Read more