https://www.elevenforum.com/t/existing-windows-11-bootable-usb-no-longer-works-after-installing-may-9-update-and-applying-secure-boot-revocations.14849/#post-295907

The Macrium Rescue USB no longer works either after applying the May 9 security update revocations to the UEFI firmware.

Today I read the above article.

Is Macrium affected?

https://forum.macrium.com/71102/How-to-manage-the-Windows-Boot-Manager-revocations-for-Secure-Boot-changes-associated-with-CVE202324

The linked thread above is useful. But if you want a TL;DR, if you follow the manual steps to apply the actual revocations rather than merely installing the May update, then as of today, in order to continue using Rescue Media, you will need to either temporarily disable UEFI Secure Boot when you need to use that Rescue Media OR you will need to manually inject the May update into your Rescue Media boot.wim file after it is created.

Microsoft says that updated installation media should become available, but it's unclear whether they'll also be updating WinPE environments based on the old kernels.  If they do, then future Rescue Media builds should be able to use those and will be good to go. But whether or not it will happen, it hasn't happened yet.  For now, Macrium has said they're looking into this issue and determining a path forward, but that may depend on what Microsoft ends up doing (or not doing -- hence the need for the workarounds in the meantime.