Security News > 2024 > April > Microsoft releases Exchange hotfixes for security update issues

Microsoft has released hotfix updates to address multiple known issues impacting Exchange servers after installing the March 2024 security updates.
Although the April 2024 HU is optional, it also adds support for ECC certificates and Hybrid Modern Authentication for OWA/ECP. If you have installed the March 2024 SU and have not experienced any known issues fixed in the optional update and do not need the new features, you can wait for the next Exchange Server SU, which will also include these hotfixes.
"The April 2024 HU includes the same security updates as the March 2024 SU, while addressing known issues with the March 2024 SU," the Exchange Team explained.
In January, Redmond announced the end of mainstream support for Exchange Server 2019, saying it will keep releasing patches to fix the latest discovered security issues but will no longer accept requests for bug fixes and Design Change Requests.
Exchange Server 2016 reached its mainstream end date in October 2020 but is under extended support until October 2025, just like Exchange Server 2019.
The company now provides Microsoft 365 migration information on its documentation site and guidance to help global admins decide the migration path in Exchange Online.
News URL
Related news
- Week in review: Chrome sandbox escape 0-day fixed, Microsoft adds new AI agents to Security Copilot (source)
- Still Using an Older Version of iOS or iPadOS? Update Now to Patch These Critical Security Vulnerabilities (source)
- April 2025 Patch Tuesday forecast: More AI security introduced by Microsoft (source)
- Google's got a hot cloud infosec startup, a new unified platform — and its eye on Microsoft's $20B+ security biz (source)
- Microsoft: April 2025 updates break Windows Hello on some PCs (source)
- Microsoft investigates global Exchange Admin Center outage (source)
- Microsoft releases emergency update to fix Office 2016 crashes (source)
- Microsoft: Windows 'inetpub' folder created by security fix, don’t delete (source)
- Microsoft: New Windows updates fix Active Directory policy issues (source)
- Microsoft: Exchange 2016 and 2019 reach end of support in six months (source)